Credential access
Reads Azure account tokens, config files, cloud credentials, and environment variables.
brew
Microsoft Azure CLI 2.0. Version 2.88.0 via Homebrew; verified 2026-07-07.
agent safety
azure-cli controls Azure accounts, resources, subscriptions, and deployments.
Reads Azure account tokens, config files, cloud credentials, and environment variables.
Can create, delete, and reconfigure Azure infrastructure.
Can deploy application artifacts and infrastructure templates.
Gate mutating az commands and credential export or login changes.
Allow account/resource reads in safe subscriptions; require approval for writes and deletes.
install
brew install azure-clilocal Homebrew formula metadata
sudo port install azure-cliMacPorts ports tree · sysutils/azure-cli/Portfile · source: api.github.com
sudo apt install azure-cliDebian stable package indexes · azure-cli · source: deb.debian.org
sudo dnf install azure-cliFedora Rawhide package metadata · azure-cli · source: dl.fedoraproject.org
nix profile install nixpkgs#azure-clinixpkgs package indexes · pkgs/by-name/az/azure-cli/package.nix · source: api.github.com
sudo pacman -S azure-cliArch Linux sync databases · azure-cli · source: geo.mirror.pkgbuild.com
sudo zypper install azure-cliopenSUSE Tumbleweed package metadata · azure-cli · source: download.opensuse.org
choco install azure-cliChocolatey community package catalog · azure-cli · source: community.chocolatey.org
scoop install main/azure-cliScoop official bucket manifest trees · bucket/azure-cli.json · source: api.github.com
winget install --id Microsoft.AzureCLI -eWindows Package Manager source index · Microsoft.AzureCLI · source: cdn.winget.microsoft.com
overview
Microsoft Azure CLI 2.0
history
Azure CLI is Microsoft's cross-platform `az` command-line client for managing Azure resources. It is one of the canonical cloud-provider CLIs in package-manager indexes because it turns Azure administration, provisioning, identity, and resource inspection into scriptable shell commands.
The Azure CLI 2.x line was developed in the open at Azure/azure-cli as a next-generation, multi-platform Azure command-line experience. The repository's earliest GitHub Releases include the 0.1 beta series in 2016, followed by the 2.x release train that became the standard `az` CLI used from local terminals, CI jobs, containers, and Azure Cloud Shell.
The CLI is implemented as a Python package with command modules for Azure service areas. Microsoft Learn positions it as the primary Azure command-line surface, with configuration under the Azure CLI config directory and first-class documentation for authentication, output formatting, querying, and automation patterns.
Azure CLI became package-manager furniture because Azure users need the same `az` command on macOS, Linux, Windows, containers, and hosted CI. The input package facts list broad distribution across Homebrew, Chocolatey, Debian, Fedora/DNF, MacPorts, Nix, Arch/pacman, Scoop, winget, and zypper, which matches its role as a cloud bootstrap tool rather than an optional developer convenience.
Its presence in Azure Cloud Shell further normalized `az` as the default examples language for many Azure docs and snippets. Package users care that Homebrew and Linux packages track a large upstream release train and that shell completion, JSON/table/TSV output, and JMESPath querying make it pleasant in scripts.
Typical usage is `az group create`, `az vm create`, `az storage ...`, `az account get-access-token`, or `az rest`, usually combined with `--query` and `--output` for shell pipelines. The official docs emphasize using `az configure`, environment variables, and the INI-style config file to tune defaults.
Credentials and tokens are stored under the Azure CLI config directory; current source code uses `msal_token_cache` and `service_principal_entries` there. Package maintainers and automation users should treat the directory as sensitive state, especially on shared runners.
For package nerds, `azure-cli` is a classic heavyweight cloud CLI: fast-moving, Python-based, dependency-rich, and distributed everywhere. It stress-tests package managers on update cadence, Python dependency isolation, shell completion, telemetry defaults, and whether the packaged binary behaves the same as Microsoft's install scripts.
It also demonstrates the difference between a formula that installs a CLI and the hidden state that CLI writes under the user's home directory. Upgrades are routine, but auth caches and config files often outlive package removals.
security posture
cloud infrastructure mutation tool.
orange risk · high confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.azure/config%USERPROFILE%\.azure\configCredential-bearing paths to review before unattended agent runs.
~/.azure/msal_token_cache.json~/.azure/service_principal_entries.json~/.azure/accessTokens.jsonexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
az | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/Azure/azure-cli
install metadata
| Package key | brew:azure-cli |
|---|---|
| Version | 2.88.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/azure-cli |
| Homepage | https://docs.microsoft.com/cli/azure/overview |
| Repository | https://github.com/Azure/azure-cli |
| Upstream docs | https://learn.microsoft.com/en-us/cli/azure |
| License | MIT |
| Source archive | https://github.com/Azure/azure-cli/archive/refs/tags/azure-cli-2.88.0.tar.gz |
| Last updated | 2026-07-07T09:03:39Z |
| Pulse | updated |
| Dependencies | libsodium, libyaml, openssl@3, python@3.14 |
| Build dependencies | pkgconf, rust |
| Uses from macOS | libffi |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | azure-cli |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
azure-cli 2.74.0-1
Azure Command-Line Interface (CLI)
https://github.com/Azure/azure-cli
sudo apt install azure-clipython3-azure-cli 2.74.0-1
Azure Command-Line Interface (CLI) - commands modules
https://github.com/Azure/azure-cli
sudo apt install python3-azure-clipython3-azure-cli-core 2.74.0-1
Azure Command-Line Interface (CLI) - core modules
https://github.com/Azure/azure-cli
sudo apt install python3-azure-cli-corepython3-azure-cli-telemetry 2.74.0-1
Azure Command-Line Interface (CLI) - telemetry modules
https://github.com/Azure/azure-cli
sudo apt install python3-azure-cli-telemetrypython3-azure-cli-testsdk 2.74.0-1
Azure Command-Line Interface (CLI) - testsdk modules
https://github.com/Azure/azure-cli
sudo apt install python3-azure-cli-testsdkazure-cli
nix profile install nixpkgs#azure-cliazure-cli 2.85.0-2.fc45
Microsoft Azure Command-Line Tools
https://github.com/Azure/azure-cli
sudo dnf install azure-clipython3-azure-cli-core 2.85.0-2.fc45
Microsoft Azure Command-Line Tools Core Module
https://github.com/Azure/azure-cli
sudo dnf install python3-azure-cli-corepython3-azure-cli-telemetry 2.85.0-2.fc45
Microsoft Azure CLI Telemetry Package
https://github.com/Azure/azure-cli
sudo dnf install python3-azure-cli-telemetrypython3-azure-cli-testsdk 2.85.0-2.fc45
Microsoft Azure CLI SDK testing tools
https://github.com/Azure/azure-cli
sudo dnf install python3-azure-cli-testsdkazure-cli 2.86.0-1
Command-line tools for Microsoft Azure
https://github.com/Azure/azure-cli
sudo pacman -S azure-cliazure-cli 2.87.0-1.1
Microsoft Azure CLI 2.0
https://github.com/Azure/azure-cli
sudo zypper install azure-cliazure-cli
sudo port install azure-cliazure-cli
choco install azure-climain/azure-cli
scoop install main/azure-cliMicrosoft.AzureCLI
winget install --id Microsoft.AzureCLI -esource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.