KeyVault Studio vs Agent Lab

Azure Key Vault, without the portal: KeyVault Studio is the native client for Mac, iPhone and iPad. Your secrets, keys and certificates are well protected in Azure. Managing them just takes too many clicks in the portal. KeyVault Studio turns that into a real Apple app: fast, focused and secured with Face ID / Touch ID. Want to look around first? Demo mode opens the complete app with sample data, no Azure account needed. SECRETS ▸ Create, view, update and delete, every value behind Face ID / Touch ID ▸ Full version history with side-by-side comparison ▸ Content types for JSON, XML, connection strings and API keys ▸ The app warns before anything expires, with thresholds you choose ▸ Copied values clear themselves from the clipboard KEYS ▸ Create RSA, EC and HSM-backed keys ▸ Crypto Playground: encrypt, decrypt, sign, verify, wrap, unwrap ▸ Rotation policies and one-tap rotation ▸ Import from JSON Web Key CERTIFICATES ▸ Issue self-signed and CA-signed certificates ▸ Import PFX/P12 and PEM, export the public certificate or the private key ▸ Manage policies, issuers, contacts and pending operations NETWORKING ▸ Configure the vault firewall, VNet rules and private endpoints ▸ Manage private DNS zones, record sets and VNet links ▸ Approve or reject private endpoint connections VAULTS ▸ Find vaults across all your Subscriptions in seconds ▸ Create a new vault with a guided wizard ▸ Backup and restore, AES-GCM encrypted if you want ▸ Recover or purge soft-deleted vaults and items AI ASSISTANT ▸ Ask questions about your own infrastructure: what expires soon, what is disabled ▸ Runs fully on device if you want: Apple Intelligence or Gemma, no cloud required ▸ Or bring your own key: Claude, OpenAI, Gemini, plus Ollama on your own network ▸ Naming suggestions per Cloud Adoption Framework, subnet and address space planning ▸ The assistant sees names and metadata, never secret values ▸ A visible token budget keeps API costs under control BUILT FOR APPLE PLATFORMS ▸ Mac, iPhone and iPad with the same feature set, tuned per size class ▸ Lightning-fast search across every vault and item, right on the device ▸ Several accounts side by side: Azure Commercial, US Government and China clouds ▸ No middleman servers: the app talks directly to Azure with your Microsoft Entra ID sign-in Bring your own app registration or use the built-in one. Your secrets never leave your device except to Azure.

Agent Lab is a learning and experimentation playground for AI agents, built for AI learners, agent developers, and product managers. It doesn't just run agents — it makes every step of an agent's execution visible, so you can finally understand how agents actually work. Unlike an ordinary AI chat app, Agent Lab is about learning, experimenting, debugging, and visualization. On every run you can see the prompts, tool calls, retrieval, tokens, and latency — nothing is hidden. Get started fast · On-device local models: download a small Qwen model on first use (Wi-Fi recommended), then run it fully offline — no API key and no second machine required. Cost is always 0, and tokens and latency are shown for real. · Download on demand: grab other open-source models your device can actually run, with capability gating based on your chip and memory. · Cloud models: works with Chat Completions-compatible APIs (DeepSeek, Moonshot, OpenRouter, and more) and Anthropic Claude — just enter your key, base URL, and model. Three built-in demos · Customer Support Agent — demonstrates tool calling and workflow with a built-in mock order system, no real backend needed. · RAG Knowledge Base — comes with curated reference docs (LangGraph, MCP, LLM APIs, Python) and lets you upload your own PDF / Markdown / TXT, then inspect the retrieved chunks, similarity scores, and final answer. · Research Agent — shows how an agent plans on its own: Planner → Search → Read → Summarize → Answer. Unified visual debugging Every demo offers three views: · Timeline — the full step-by-step sequence of LLM and tool calls · Graph — the workflow graph, highlighting the active node as it runs · Console — expand any step to see System / User / Assistant prompts, the complete LLM request and response JSON, tool requests and responses, tokens, estimated cost, latency, and errors Security and privacy · API keys are stored encrypted on-device via the system Keychain — local only, never uploaded to any server. · Uploaded knowledge-base files and the vector indexes built from them stay on your device and can be deleted anytime. · On-device inference runs fully offline; your data never leaves the device. No sign-up, no login — open it and go. Make every step an agent takes visible.