PHPackages                             tecnovix/azure-key-vault - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. tecnovix/azure-key-vault

ActiveLibrary

tecnovix/azure-key-vault
========================

Allow secrets to be easily fetched from an Azure Key Vault from within a Laravel application

01PHP

Since Dec 7Pushed 3y agoCompare

[ Source](https://github.com/adenisdeveloper/azure-key-vault)[ Packagist](https://packagist.org/packages/tecnovix/azure-key-vault)[ RSS](/packages/tecnovix-azure-key-vault/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependenciesVersions (1)Used By (0)

Azure Key Vault wrapper for Laravel
===================================

[](#azure-key-vault-wrapper-for-laravel)

Overview
--------

[](#overview)

This package allows secrets to be fetched from, or set in, an [Azure Key Vault](https://docs.microsoft.com/en-us/azure/key-vault/), with an interface similar to `env()` and `config()`.

Installation
------------

[](#installation)

Require this package with composer:

```
composer require tecnovix/azure-key-vault

```

The package should be discovered by Laravel on installation.

The following environment variables must be set, if the package's default configuration is used:

- `AZURE_AD_CLIENT_ID` the UUID of the service principal which will be used to access the vault. This service principal needs "Get Secret" permission on that vault.
- `AZURE_AD_CLIENT_SECRET` the shared secret for that service principal.
- `AZURE_AD_TENANT_ID` the UUID for the tenant under which that service principal exists.
- `AZURE_KEY_VAULT_NAME` the name of the key vault (used as a subdomain in its hostname; e.g. `fred` in `fred.vault.azure.net`).

This package publishes its configuration to `vault.php`. This can be done with:

```
php artisan vendor:publish --provider='InsitesConsulting\AzureKeyVault\ServiceProvider'

```

The configuration entries are as follows:

- `tenant_id` the tenant UUID
- `client_id` the service principal UUID
- `client_secret` the service principal shared secret
- `vault` the vault name

Usage
-----

[](#usage)

This package provides a facade called `Vault`, with three methods `Vault::secret()`, `Vault::setSecret()` and `Vault::setVault()`, as well as a global helper function `secret()`.

To fetch a secret called 'apikey':

```
$secret = Vault::secret('apikey');
```

If the secret does not exist, `null` will be returned, unless a different default value is specified, as here:

```
$other_secret = Vault::secret('otherkey', 'default-value');
```

If there is an error, an `InsitesConsulting\AzureKeyVault\AzureKeyVaultException` will be thrown. Its message will be set to the body of the error response from Azure, and its code will be set to the HTTP status of that response.

The global helper function behaves identically to the facade method:

```
$secret = secret('apikey');
$other_secret = secret('otherkey', 'default-key');
```

To set a secret called 'apikey' to the value 'longsecretvalue':

```
Vault::setSecret('apikey', 'longsecretvalue');
```

This method is void, but will throw an `InsitesConsulting\AzureKeyVault\AzureKeyVaultException` on error, in the same manner as `Vault::secret()`.

In order to work with multiple vaults, use `Vault::setVault()` to change the vault name used:

```
$secret = secret('apikey');
Vault::setVault('other-vault');
$other_secret = secret('apikey');
```

This is persistent: the newly set vault will remain until `Vault::setVault()`is called again.

Calling `Vault::setVault()` with no argument will reset the vault name to that set in the config file:

```
$other_secret = secret('apikey');
Vault::setVault();
$secret = secret('apikey');
```

###  Health Score

14

—

LowBetter than 2% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity1

Limited adoption so far

Community10

Small or concentrated contributor base

Maturity24

Early-stage or recently created project

 Bus Factor1

Top contributor holds 86.4% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/c391bc9087a31b08bfd62fafe119a1f8303ddb7423c47bf002e71c39d0b8700a?d=identicon)[adenisdeveloper](/maintainers/adenisdeveloper)

---

Top Contributors

[![stephen-isc](https://avatars.githubusercontent.com/u/74552516?v=4)](https://github.com/stephen-isc "stephen-isc (19 commits)")[![adrum](https://avatars.githubusercontent.com/u/1464185?v=4)](https://github.com/adrum "adrum (1 commits)")[![bobbypiperagrovista](https://avatars.githubusercontent.com/u/122941123?v=4)](https://github.com/bobbypiperagrovista "bobbypiperagrovista (1 commits)")[![shealavington](https://avatars.githubusercontent.com/u/16869302?v=4)](https://github.com/shealavington "shealavington (1 commits)")

### Embed Badge

![Health badge](/badges/tecnovix-azure-key-vault/health.svg)

```
[![Health](https://phpackages.com/badges/tecnovix-azure-key-vault/health.svg)](https://phpackages.com/packages/tecnovix-azure-key-vault)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)