For Agents
Provision and operate Azure Media Services accounts: create accounts, rotate access keys, sync storage keys, and manage backing storage relationships. Useful for automating video pipeline infrastructure.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the MediaServicesManagementClient, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with MediaServicesManagementClient API.
Create or update an Azure Media Services account in a chosen region with a backing storage account
List Media Services accounts within a resource group to inventory video infrastructure
Retrieve a Media Services account to inspect its storage relationship and tags
Regenerate Media Services account access keys to rotate credentials
GET STARTED
Use for: I need to provision a new Azure Media Services account for a video pipeline, Rotate the access keys on an Azure Media Services account, List all Media Services accounts in this resource group, Sync storage account keys to a Media Services account after rotation
Not supported: Does not encode video, package streams, or manage assets and jobs — use for control-plane Media Services account lifecycle and key management only.
Jentic publishes the only available OpenAPI document for MediaServicesManagementClient, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for MediaServicesManagementClient, keeping it validated and agent-ready. The Azure Media Services management API provisions and operates Media Services accounts that back video encoding, packaging, and streaming workloads. Use it to create accounts, list and update existing ones, manage the storage keys that bind the account to its backing storage, and verify name availability before provisioning. Authentication is via Azure Active Directory OAuth 2.0 on Azure Resource Manager.
Synchronise storage account keys after rotation so Media Services keeps streaming uninterrupted
Check whether a candidate Media Services account name is available before provisioning
Delete a Media Services account when the video workload is decommissioned
Patterns agents use MediaServicesManagementClient API for, with concrete tasks.
★ Provision Media Services for a new video product
Engineering teams use the API to provision an Azure Media Services account at the start of a new video product, attaching it to a backing storage account that will hold the source assets and streaming outputs. A single PUT call creates the account in the chosen region with the desired tags and storage reference, and downstream pipelines can then create assets and jobs through the data-plane API.
PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName} with location and storageAccounts list, then verify with the matching GET.
Rotate Media Services access keys on a schedule
Security policy often mandates account key rotation on a fixed cadence. The API supports listing the current access keys, regenerating one, and then updating downstream consumers with the new key. Combine with the storage sync endpoint to ensure the Media Services account stays in lockstep with backing storage keys when those rotate too.
POST /.../listKeys to capture the existing key, POST /.../regenerateKey with the keyType to rotate, then update consumers with the new key value from the response.
Reconnect Media Services after storage key rotation
When the backing storage account rotates its keys, the linked Media Services account loses access until it picks up the new keys. The syncStorageKeys POST forces Media Services to re-fetch the storage credentials, restoring streaming and encoding throughput without requiring a recreate. Run it as the final step of any storage rotation playbook.
POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/syncStorageKeys with the storageAccountId in the body.
Agent-driven Media Services lifecycle
Through Jentic, an AI agent can react to a video product launch checklist and provision a complete Media Services account, attach storage, set tags, and emit the keys to a downstream pipeline. The agent searches Jentic for 'create azure media services account', loads the operation, and chains the calls. Jentic injects the Azure AD bearer token at execution time so the agent never sees raw credentials.
Use Jentic search 'create azure media services account', load MediaService_Create, supply location and storage account ID, and execute, then chain MediaService_ListKeys.
10 endpoints — jentic publishes the only available openapi specification for mediaservicesmanagementclient, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}
Create a Media Services account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}
Update a Media Services account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices
List Media Services accounts in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/listKeys
List Media Services account keys
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/regenerateKey
Regenerate a Media Services key
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/syncStorageKeys
Sync backing storage keys
/subscriptions/{subscriptionId}/providers/Microsoft.Media/CheckNameAvailability
Check Media Services name availability
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}
Create a Media Services account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}
Update a Media Services account
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices
List Media Services accounts in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/listKeys
List Media Services account keys
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/regenerateKey
Three things that make agents converge on Jentic-routed access.
Credential isolation
Azure AD client credentials live encrypted in the Jentic vault. Jentic mints a short-lived ARM-scoped bearer token at execution time so the agent never handles raw client secrets.
Intent-based discovery
Agents search Jentic with phrases like 'create azure media services account' or 'rotate media services keys' and Jentic returns the matching MediaService operation with its input schema.
Time to first call
Direct integration: 2-3 days to handle MSAL, ARM async polling, and the storage account binding. Through Jentic: under an hour.
Alternatives and complements available in the Jentic catalogue.
Storage Management Client
Provision and rotate keys on the Azure Storage accounts that back Media Services.
Use Storage Management to provision the backing storage account before creating a Media Services account, then sync keys when rotating.
Resource Management Client
Provision the resource group that contains a Media Services account.
Use Resource Management to set up the resource group before creating Media Services within it.
Compute Management Client
Run custom video encoding on VMs instead of using managed Media Services.
Pick Compute when the encoding pipeline needs custom binaries; pick Media Services when managed encoding and streaming meet the requirement.
Management Lock Client
Apply CanNotDelete locks on production Media Services accounts.
Combine with Media Services to protect production video accounts from accidental deletion.
Specific to using MediaServicesManagementClient API through Jentic.
Why is there no official OpenAPI spec for MediaServicesManagementClient?
Microsoft Azure does not publish a standalone OpenAPI specification for the Media Services management resource provider. Jentic generates and maintains this spec so that AI agents and developers can call MediaServicesManagementClient via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the Media Services Management API use?
The API uses Azure Active Directory OAuth 2.0 via the azure_auth scheme on https://management.azure.com/. Through Jentic, your Azure AD application credentials are stored encrypted in the Jentic vault and exchanged for a short-lived bearer token at execution time.
Can I provision a Media Services account with this API?
Yes. Call PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName} with location and a storageAccounts list referencing the backing Azure Storage account. The new account is ready to receive data-plane calls once provisioning succeeds.
What are the rate limits for the Media Services Management API?
The control-plane endpoints inherit standard Azure Resource Manager throttle quotas, surfaced through x-ms-ratelimit-remaining-* response headers. Bulk creation or rotation operations should respect those headers and back off when remaining quota approaches zero.
How do I rotate Media Services keys through Jentic?
Search Jentic for 'rotate azure media services keys', load MediaService_RegenerateKey, supply the keyType (primary or secondary) in the body, and execute. The response returns the new key, which the agent can then push to downstream consumers.
Does this API also encode or stream video?
No. This is the management plane for the account itself. Data-plane operations such as creating assets, jobs, encoding presets, and streaming endpoints are handled via the Media Services data plane, which is separate from this resource provider API.
What happens if I forget to sync storage keys after rotation?
Streaming and encoding workloads will start to fail with authorisation errors against the backing storage account. Calling POST /.../syncStorageKeys forces Media Services to re-fetch the latest storage keys, immediately restoring access without recreating the account.
Regenerate a Media Services key
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Media/mediaservices/{mediaServiceName}/syncStorageKeys
Sync backing storage keys
/subscriptions/{subscriptionId}/providers/Microsoft.Media/CheckNameAvailability
Check Media Services name availability