For Agents
Manage Azure Managed Application Definitions and deployed Managed Application instances across subscriptions and resource groups.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Azure Managed Applications Client, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with Azure Managed Applications Client API.
List deployed Managed Applications across a subscription or resource group
Retrieve a Managed Application by id, by name, or by application id
List Application Definitions available in a resource group
Get a specific Application Definition by name
GET STARTED
Use for: List all Managed Applications in subscription 1111-2222-3333-4444, Get the Managed Application 'contoso-solution' in resource group 'rg-prod', Retrieve a Managed Application by its application id, List the Application Definitions available in resource group 'rg-publisher'
Not supported: Does not deploy ARM templates directly, manage marketplace listings, or configure Managed Application managed identities — use only for the Microsoft.Solutions Managed Application and Application Definition lifecycle.
Jentic publishes the only available OpenAPI document for Azure Managed Applications Client, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for Azure Managed Applications Client, keeping it validated and agent-ready. This API manages ARM Managed Applications and Application Definitions: catalogue templates that publishers offer to consumers, the deployed Managed Application instances inside customer subscriptions, and the operations to list, get, create, update, and delete them. It is the surface used by ISVs to ship turnkey Azure solutions and by customers to track deployed instances.
Create or update a Managed Application from an Application Definition
Delete a Managed Application or Application Definition
Patterns agents use Azure Managed Applications Client API for, with concrete tasks.
★ Customer Subscription Inventory
ISVs and platform teams need to know every Managed Application instance deployed inside a customer subscription so they can plan upgrades or end-of-life migrations. GET /subscriptions/{subscriptionId}/providers/Microsoft.Solutions/applications returns the full subscription-wide list, while the resource-group-scoped variant supports per-tenant or per-environment auditing.
List all Managed Applications in subscription 1111-2222-3333-4444 and emit a CSV of name, location, and applicationDefinitionId
Catalogue-Driven Deployment
Customers deploy a Managed Application by referencing an Application Definition published by an ISV. PUT on /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications/{applicationName} creates the deployed instance with parameters bound to the definition, so a self-service portal can launch ISV solutions without raising a support ticket.
Create a Managed Application named 'finance-app-prod' in 'rg-customer' from Application Definition '/subscriptions/.../applicationDefinitions/finance-suite' with provided parameters
Application Definition Lifecycle for Publishers
Publishers list and update Application Definitions in their publisher resource group. GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions lists definitions, and the per-name endpoints support get and delete, supporting CI/CD flows where each new version registers a new definition entry.
List Application Definitions in resource group 'rg-publisher' and report the latest version per definition name
Agent-Driven Solution Inventory and Cleanup
An AI agent running monthly hygiene can list every Managed Application across customer subscriptions, flag those whose Application Definition has been retired, and delete or migrate the orphans. Through Jentic, intent search returns the right list, get, and delete operations; the Azure OAuth token is held in the credential vault so the agent never sees raw secrets.
Search Jentic for 'list Azure Managed Applications', execute against subscription 1111-2222-3333-4444, and flag any Managed Application whose applicationDefinitionId returns 404
14 endpoints — jentic publishes the only available openapi specification for azure managed applications client, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/subscriptions/{subscriptionId}/providers/Microsoft.Solutions/applications
List Managed Applications in a subscription
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications
List Managed Applications in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications/{applicationName}
Get a Managed Application
/{applicationId}
Get a Managed Application by id
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions
List Application Definitions in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions/{applicationDefinitionName}
Get an Application Definition
/subscriptions/{subscriptionId}/providers/Microsoft.Solutions/applications
List Managed Applications in a subscription
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications
List Managed Applications in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications/{applicationName}
Get a Managed Application
/{applicationId}
Get a Managed Application by id
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions
List Application Definitions in a resource group
Three things that make agents converge on Jentic-routed access.
Credential isolation
Azure Active Directory OAuth 2.0 tokens are minted and rotated inside the Jentic vault (MAXsystem). Service principal client secrets stay encrypted; agents call Microsoft.Solutions with a short-lived scoped token only.
Intent-based discovery
Agents search by intent (e.g., 'list Azure Managed Applications') and Jentic returns the matching applications or applicationDefinitions operation with its input schema, so the agent does not need to navigate the long Microsoft.Solutions path tree.
Time to first call
Direct ARM integration: 1-3 days for AAD app registration, token acquisition, async polling on create/delete, and pagination. Through Jentic: under 1 hour — search, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
Azure Resource Management Client
Manages the resource groups and ARM resources that Managed Applications materialise inside.
Use ARM for the underlying resource graph; use this client for the Managed Application abstraction on top.
Azure Deployment Manager
Coordinates multi-stage deployments that may include Managed Application rollouts.
Use Deployment Manager for multi-stage rollouts; use this client for the Managed Application instance lifecycle.
Azure Policy Client
Enforces governance over which Application Definitions consumers may deploy.
Use Policy to govern allowed Application Definitions; use this client to deploy and inventory Managed Applications.
Google App Engine API
GCP managed application surface — different model, similar consumer-deploys-from-template role.
Choose App Engine for GCP-hosted apps. Stay with Managed Applications for Azure ISV solutions and consumer subscriptions.
Specific to using Azure Managed Applications Client API through Jentic.
Why is there no official OpenAPI spec for Azure Managed Applications Client?
Microsoft Azure does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Azure Managed Applications Client via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the Azure Managed Applications Client use?
The API uses Azure Active Directory OAuth 2.0 bearer tokens (the azure_auth scheme) on management.azure.com. Through Jentic, the AAD app secret is held in the MAXsystem vault and exchanged for a short-lived bearer token at execution time, so agents never see the raw secret.
Can I deploy a Managed Application from a published definition with this API?
Yes. PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applications/{applicationName} creates a Managed Application bound to an Application Definition by id, with the consumer parameters in the request body. Poll the returned operation until it succeeds.
How do I find every Managed Application in a subscription?
Call GET /subscriptions/{subscriptionId}/providers/Microsoft.Solutions/applications. The response paginates with nextLink and includes each application's name, applicationDefinitionId, and provisioningState, which is the data you need for inventory and renewal workflows.
What are the rate limits for this API?
Azure Resource Manager applies subscription-level throttling. List operations are inexpensive but pagination adds calls; create and delete are async and trigger long-running operations. Honour HTTP 429 Retry-After values and avoid back-to-back create attempts on the same name.
How do I list and audit Managed Applications through Jentic?
Run pip install jentic, then search Jentic with 'list Azure Managed Applications'. Jentic returns the subscription-scope list endpoint with its input schema. Execute it, then for each entry call the get-by-id endpoint; the OAuth token is resolved from the vault automatically.
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions/{applicationDefinitionName}
Get an Application Definition