From azure-sdk-rust
Manages Azure Key Vault secrets in Rust: authenticate with Entra ID, get/set/update/delete/list using SecretClient. Includes best practices.
npx claudepluginhub microsoft/skills --plugin azure-sdk-rustThis skill uses the workspace's default tool permissions.
Client library for Azure Key Vault Secrets — secure storage for passwords, API keys, and other secrets.
Manages Azure Key Vault secrets in Rust: authenticate with DeveloperToolsCredential, get/set/update/delete/list secrets, handle versions and tags.
Manages cryptographic keys using Azure Key Vault Keys Rust SDK: create RSA/EC keys, encrypt/sign/verify, backup/restore securely without exposing private keys.
Searches, retrieves, and installs Agent Skills from prompts.chat registry using MCP tools like search_skills and get_skill. Activates for finding skills, browsing catalogs, or extending Claude.
Share bugs, ideas, or general feedback.
Client library for Azure Key Vault Secrets — secure storage for passwords, API keys, and other secrets.
cargo add azure_security_keyvault_secrets azure_identity
AZURE_KEYVAULT_URL=https://<vault-name>.vault.azure.net/
use azure_identity::DeveloperToolsCredential;
use azure_security_keyvault_secrets::SecretClient;
let credential = DeveloperToolsCredential::new(None)?;
let client = SecretClient::new(
"https://<vault-name>.vault.azure.net/",
credential.clone(),
None,
)?;
let secret = client
.get_secret("secret-name", None)
.await?
.into_model()?;
println!("Secret value: {:?}", secret.value);
use azure_security_keyvault_secrets::models::SetSecretParameters;
let params = SetSecretParameters {
value: Some("secret-value".into()),
..Default::default()
};
let secret = client
.set_secret("secret-name", params.try_into()?, None)
.await?
.into_model()?;
use azure_security_keyvault_secrets::models::UpdateSecretPropertiesParameters;
use std::collections::HashMap;
let params = UpdateSecretPropertiesParameters {
content_type: Some("text/plain".into()),
tags: Some(HashMap::from([("env".into(), "prod".into())])),
..Default::default()
};
client
.update_secret_properties("secret-name", params.try_into()?, None)
.await?;
client.delete_secret("secret-name", None).await?;
use azure_security_keyvault_secrets::ResourceExt;
use futures::TryStreamExt;
let mut pager = client.list_secret_properties(None)?.into_stream();
while let Some(secret) = pager.try_next().await? {
let name = secret.resource_id()?.name;
println!("Secret: {}", name);
}
use azure_security_keyvault_secrets::models::SecretClientGetSecretOptions;
let options = SecretClientGetSecretOptions {
secret_version: Some("version-id".into()),
..Default::default()
};
let secret = client
.get_secret("secret-name", Some(options))
.await?
.into_model()?;
DeveloperToolsCredential for dev, ManagedIdentityCredential for productioninto_model()? — to deserialize responsesResourceExt trait — for extracting names from IDsAssign these Key Vault roles:
Key Vault Secrets User — get and listKey Vault Secrets Officer — full CRUD