Skip to main content

Scan Azure resources for credentials and expirations

POST 

/api/v1/integrations/azure/scan

Accepts a pasted access token or authMethod: client_credentials (tenant ID, client ID, client secret). Commercial Azure only (login.microsoftonline.com, vault.azure.net); national clouds are not supported. Key Vault inventory lists metadata, so Key Vault Reader is enough. This is not CertOps Azure DNS. OpenID discovery is used only for Graph (Entra) scans, not Key Vault.

Request​

Responses​

Integration scan result