KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#typescript #ai-agents #cli #open-source #ai #claude-code #codex #developer-tools #react #windows #deepseek-harness #ai-agent

AzureKeyVaultExplorer

★ 116 Open GitHub ↗

A cross-platform GUI desktop application for aggregating/managing secrets (and keys and certificates) in Azure Key Vault

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<img width="280" align="center" src="src/uno/icon-iOS-Default-1024x1024%401x.png">

<h1 align="center">
 Azure Key Vault Explorer
</h1>

 Find Key Vaults in Azure faster.


 <a href="https://apps.microsoft.com/detail/9mz794c6t74m?cid=github_readme&mode=direct">
 <img src="https://get.microsoft.com/images/en-us%20light.svg" width="200"/>
 </a>

### Install via Winget (Windows)
```pwsh
winget install "Key Vault Explorer" --source msstore
```

### [macOS](#macos) and Linux
Download from the [releases page](https://github.com/cricketthomas/AzureKeyVaultExplorer/releases).

![Downloads](https://img.shields.io/github/downloads/cricketthomas/AzureKeyVaultExplorer/total)
![CodeQL](https://github.com/cricketthomas/azurekeyvaultexplorer/workflows/CodeQL/badge.svg)
 
 	Named 'Key Vault Explorer' in the Microsoft Store.

## Overview
Visit the releases section to download the application for mac and linux.

**Key Vault Explorer** is a lightweight tool with the idea to simplify finding and accessing secrets (and certificates and keys) stored in Azure Key Vault, providing a interface for aggregating, filtering, and quickly getting secret values. The app was inspired by the original [AzureKeyVaultExplorer](https://github.com/microsoft/AzureKeyVaultExplorer) with the goal to eventually bring some more feature parity but first bringing the application to macOS.

### Key features

- Signing in with a Microsoft Account [See how credentials are secured](#security)
- English, French, Spanish, Portuguese and German language support in Microsoft Store and MacOS versions for v2
- Support to selectively include/exclude subscriptions to show resource groups and key vaults in the tree
- Ability to filter subscriptions, resource groups, and key vaults by name
- Saving vaults to "pinned" section in quick access menu and saving selected subscriptions in SQLite
- Copy secrets to the clipboard using Control+C
- Automatic clearing of clipboard values after a set amount of time (configurable up to 60 seconds)
- Viewing details and tags about values
- Filtering and sorting of values
- Viewing last updates and next to expire values
- Downloading and saving .pfx and .cer files
- Support for custom ClientId and TenantId
- AzureGovernment, AzureChina and AzureGermany Support

### Privacy Features
- **No telemetry or logs collected**
- SQLite Database encryption using DPAPI and KeyChain on Mac

# Security

The authentication and credentials storage uses [Microsoft.Identity.Client.Extensions.Msal](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet) library are encrypted and stored with DPAPI on windows, and the keychain on macOS (you may be prompted multiple times to grant rights).
The security is pulled directly from this document: https://github.com/AzureAD/microsoft-authentication-extensions-for-dotnet/wiki/Cross-platform-Token-Cache#configuring-the-token-cache

The SQLite database is encrypted using DPAPI on windows, and on macOS the password  in the keychain.

## Screenshots

## Download

### Get it from the [releases](https://github.com/cricketthomas/AzureKeyVaultExplorer/releases) page or the Microsoft Store.

### macOS
After downloading the `.app` bundle, macOS may block it because it's from an unidentified developer. To fix this, run:

```bash
xattr -cr "/path/to/Key Vault Explorer.app"
```

Then move the app to your **Applications** folder. You may also need to go to **System Settings > Privacy & Security** and click **"Open Anyway"**.

#### Windows
After downloading the `.exe`, Windows may block it (unless you got it from winget or Microsoft Store). Right-click the file, select **Properties**, and check the **"Unblock"** checkbox at the bottom, then click **OK**.

## Setting up the application:
> [!WARNING]
> After downloading for the first time you will need to follow the first time setup guide listed below:

## Azure CLI
> [!NOTE]
> You can use a custom client ID that belongs to Microsoft Azure CLI `04b07795-8ddb-461a-bbee-02f9e1bf7b46`. This is intended for testing only and is not recommended by the maintainers of this repository, as it may violate Microsoft’s Terms of Service.
> Doing so can bypass the need for an IT administrator to grant permissions to the application, effectively circumventing the standard consent process. Navigate to the Ssttings page, check the "Custom Client ID" checkbox, add the aformentioned Clinet Id, click save, and restart the application.
> See this article for more details on the well-known client ID. https://rakhesh.com/azure/well-known-client-ids/
<img width="800" alt="image" src="https://github.com/user-attachments/assets/fe6a970c-b0bc-455c-9775-5aa57b865fd1" />

## Documentation
- [Building from source](docs/BUILDING.md)
- [Using your own Client ID / Tenant ID](docs/CUSTOM-CLIENT-TENANT-ID.md)
- [First time Azure Tenant setup](docs/FIRST-TIME-SETUP.md)
- [Troubleshooting](docs/TROUBLESHOOTING.md)

## Acknowledgements

Installer built with: [Master Packager Dev](https://www.masterpackager.com/masterpackagerdev/)

### Dependencies
- **[.NET 10](https://github.com/dotnet/runtime)**
- **[Avalonia](https://github.com/AvaloniaUI/Avalonia/)** 
- **[Uno Platform](https://github.com/unoplatform/uno)** 
- **[FluentAvalonia](https://github.com/amwx/FluentAvalonia/)**

AzureKeyVaultExplorer

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README