azure-keyvault-secrets-ts

Manage Azure Key Vault secrets with the JavaScript SDK.

2.9k|323|Updated Jan 16, 2026
One-click install
npx skills add https://github.com/microsoft/skills --skill azure-keyvault-secrets-ts-microsoft
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-keyvault-secrets-ts
Source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-keyvault-secrets-ts
Command: npx skills add https://github.com/microsoft/skills --skill azure-keyvault-secrets-ts-microsoft

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Managing application secrets securely at scale can be error-prone and insecure without a centralized solution. This skill provides a JavaScript/TypeScript interface to create, store, retrieve, update, and rotate secrets in Azure Key Vault, ensuring secret lifecycles are governed and access is controlled.

Core Features & Use Cases

  • Secret management with SecretClient: set, get, update properties, list secrets and versions.
  • Secure lifecycle operations: soft-delete, recover, purge of deleted secrets.
  • Backup and restore secrets across vaults and regions.
  • Authentication and access control via DefaultAzureCredential.

Quick Start

Install the @azure/keyvault-secrets package and initialize SecretClient with your vault URL to start storing and retrieving secrets.

Frequently Asked Questions about azure-keyvault-secrets-ts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage application secrets in Azure Key Vault using JavaScript?

You can manage application secrets in Azure Key Vault using the JavaScript SDK by initializing SecretClient with your vault URL and DefaultAzureCredential to create, retrieve, update, and list secret versions.

Can I backup and restore Azure Key Vault secrets across different vaults?

Yes, you can backup and restore Azure Key Vault secrets across vaults and regions using the SecretClient from the @azure/keyvault-secrets package to ensure robust secret lifecycle management.

What's the best way to handle soft-deleted secrets in Azure Key Vault with Node.js?

The best way to handle soft-deleted secrets is using the JavaScript SecretClient to perform secure lifecycle operations including recovering and purging deleted secrets within your Azure Key Vault.

Do I need @azure/identity to retrieve secrets from Azure Key Vault in TypeScript?

Yes, you need @azure/identity to authenticate and access Azure Key Vault. It provides DefaultAzureCredential, which is used alongside @azure/keyvault-secrets to initialize the SecretClient.

How does listing secret versions work with the Azure Key Vault JavaScript SDK?

Listing secret versions works by using the SecretClient from the @azure/keyvault-secrets package to retrieve and iterate through the historical versions of stored application secrets.

What is the process to update secret properties in Azure Key Vault using JavaScript?

Updating secret properties involves using the SecretClient from @azure/keyvault-secrets to modify metadata and attributes of stored secrets, ensuring application secret lifecycles are properly governed.