canonical: https://jentic.com/apis/azure.com/azure-stack-azure-bridge-client

# Microsoft Azure Azure Stack Azure Bridge Client

Jentic publishes the only available OpenAPI specification for Azure Stack Azure Bridge Client, keeping it validated and agent-ready. The API exposes the operations catalogue for the Microsoft.AzureStack resource provider, which is the bridge between Azure Stack hybrid deployments and the public Azure cloud. It returns the list of operations available on the provider and is intended for tooling that introspects available actions rather than for direct workload management.

## For AI agents

List the operations available on the Microsoft.AzureStack resource provider for tooling and discovery.

## Scope

Does not provision resources, manage registrations, or call admin-plane endpoints - use for listing Microsoft.AzureStack operations only.

## Capabilities

- List operations exposed by the Microsoft.AzureStack provider
- Discover supported actions before constructing role assignments
- Inspect operation display names for tooling and UI surfaces
- Verify provider availability in a tenant

## Use cases

### Discover operations for role assignments

Retrieve the full list of operations exposed by Microsoft.AzureStack so a custom role definition can be scoped to the right action strings. The single GET /providers/Microsoft.AzureStack/operations call returns operation names and display metadata. Required input for any custom RBAC role targeting Azure Stack registration.

Example prompt: GET /providers/Microsoft.AzureStack/operations and emit the list of operation names for use in a custom role definition

### Tooling discovery for hybrid environments

Populate a hybrid-cloud tooling UI with the operations Azure Stack supports so engineers can pick the right action without consulting docs. The same operations endpoint returns display strings suitable for a dropdown. Useful for internal admin portals that combine Azure and Azure Stack.

Example prompt: GET the operations endpoint and surface operation.display.operation strings in a custom admin UI dropdown

### Provider availability check

Confirm that the Microsoft.AzureStack provider is registered in a subscription by issuing the operations call and inspecting the response. A non-empty list confirms availability. Useful as a smoke test before deeper Azure Stack provisioning workflows.

Example prompt: GET /providers/Microsoft.AzureStack/operations and treat a non-empty list as confirmation that the provider is registered

### Agent-driven operation discovery

Allow an AI agent to enumerate available Azure Stack operations as a precondition for selecting a workflow or role. Through Jentic the agent searches by intent, loads the operations endpoint, and parses the response. Saves a doc lookup when an agent needs to confirm a specific action exists.

Example prompt: Search Jentic for 'list azure stack operations', execute the GET, and select the operation matching the agent's intent

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| GET | /providers/Microsoft.AzureStack/operations | List operations exposed by the Microsoft.AzureStack provider |

## Key resources

- **operations** — List operations exposed by the Microsoft.AzureStack provider

## Why Jentic

- **Setup:** Wiring the Azure Stack bridge operations API by hand means registering an Azure AD app for OAuth2 bearer auth against management.azure.com just to read the Microsoft.AzureStack provider's operations catalogue. Through Jentic you install once, import Azure Stack Azure Bridge Client from the API Directory, store the Azure AD credential once, and your agent calls it.
- **Permission scoping:** This surface exposes a single GET to /providers/Microsoft.AzureStack/operations with no resource id and no request body, so scope the agent to the operations it needs, namely listing the provider's operations. The call is read-only and returns metadata, so it cannot register, activate, or provision anything.
- **Credential handling:** Your Azure AD credential is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'list azure stack operations', and Jentic returns the matching Microsoft.AzureStack operations call ready to execute so the agent can pick the action string it needs without a documentation lookup.

## Related APIs

- **AzureBridgeAdminClient** — Admin-plane operations for Azure Stack registrations on the local admin endpoint
- **azureactivedirectory** — Manages diagnostic settings on the AAD identity provider used by Azure Stack
- **Authorization management client** — Creates role definitions that consume the action strings returned here

## FAQ

### Why is there no official OpenAPI spec for Azure Stack Azure Bridge Client?

Microsoft Azure does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Azure Stack Azure Bridge Client via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

### What authentication does this API use?

The API uses Azure AD OAuth 2.0 with the implicit flow, scoped to user_impersonation against management.azure.com. Through Jentic, the bearer token is held in your Jentic One instance and refreshed at execution time.

### Can I provision Azure Stack resources with this API?

No. This spec covers only the operations catalogue endpoint at /providers/Microsoft.AzureStack/operations. Registration, activation, and resource management live in adjacent specs such as the AzureBridgeAdminClient.

### What are the rate limits for this API?

Azure Resource Manager applies tenant-level throttling - typically 12,000 reads per hour per subscription. The operations endpoint is a read; expect synchronous 200 responses.

### How do I discover Azure Stack operations through Jentic?

Run pip install jentic, then search for 'list azure stack operations'. Jentic returns the GET /providers/Microsoft.AzureStack/operations call, executes it, and returns the operation list ready for downstream parsing.

### Does this API replace the Azure Stack admin endpoints?

No. This is a discovery endpoint on management.azure.com. The Azure Stack admin plane uses adminmanagement.local.azurestack.external as its base URL and is covered by separate specs such as AzureBridgeAdminClient.

### Can I limit what my agent is allowed to do with the Azure Stack Azure Bridge Client API?

Yes. Because you run Jentic One yourself, your own rules decide which operations and credentials the agent may use. This API exposes a single read-only GET to /providers/Microsoft.AzureStack/operations with no resource id and no request body, so you can scope the agent to just that operations-listing call. Since the call only returns provider metadata, an agent scoped to it cannot register, activate, or provision any Azure Stack resources.