BellaBaxter.Client
0.1.1-preview.77
See the version list below for details.
dotnet add package BellaBaxter.Client --version 0.1.1-preview.77
NuGet\Install-Package BellaBaxter.Client -Version 0.1.1-preview.77
<PackageReference Include="BellaBaxter.Client" Version="0.1.1-preview.77" />
<PackageVersion Include="BellaBaxter.Client" Version="0.1.1-preview.77" />
<PackageReference Include="BellaBaxter.Client" />
paket add BellaBaxter.Client --version 0.1.1-preview.77
#r "nuget: BellaBaxter.Client, 0.1.1-preview.77"
#:package BellaBaxter.Client@0.1.1-preview.77
#addin nuget:?package=BellaBaxter.Client&version=0.1.1-preview.77&prerelease
#tool nuget:?package=BellaBaxter.Client&version=0.1.1-preview.77&prerelease
BellaBaxter.Client
Auto-generated .NET HTTP client for the Bella Baxter secrets management API.
Includes built-in end-to-end encryption via BellaBaxter.Crypto.
When to use BellaBaxter.Client directly
Most applications should use the higher-level packages instead:
| Goal | Use |
|---|---|
Pull secrets into IConfiguration (hot-reload) |
BellaBaxter.AspNet.Configuration |
| Wire Bella into .NET Aspire orchestration | BellaBaxter.Aspire.Configuration |
| Scripts, tools, custom integrations | BellaBaxter.Client (this package) |
| Run the full Bella stack locally in Aspire | BellaBaxter.Aspire.Host |
Installation
dotnet add package BellaBaxter.Client
Quickstart
using BellaBaxter.Client;
var client = BellaClientFactory.Create(
apiUrl: "https://api.bella-baxter.io",
apiKey: Environment.GetEnvironmentVariable("BELLA_BAXTER_API_KEY")!
);
// List secrets for an environment
var secrets = await client.Environments.GetSecretsAsync(environmentId);
foreach (var secret in secrets)
{
Console.WriteLine($"{secret.Key} = {secret.Value}");
}
Authentication
API key (recommended for apps and CI/CD)
# Generate a key via the CLI
bella api-keys create --env production --name "MyApp Production"
# Returns: bax-<keyId>-<secret>
var client = BellaClientFactory.Create(
apiUrl: Environment.GetEnvironmentVariable("BELLA_BAXTER_URL")!,
apiKey: Environment.GetEnvironmentVariable("BELLA_BAXTER_API_KEY")!
);
API keys encode the project and environment slug — no .bella file needed.
Billed on pay-as-you-go plans. Generate via bella api-keys create or the Bella WebApp.
OAuth (local dev)
bella login # opens browser, stores token in .bella file
bella exec -- dotnet run # injects BELLA_BAXTER_API_KEY + BELLA_BAXTER_URL automatically
End-to-end encryption
Secret values are encrypted client-side using ECIES (Elliptic Curve Integrated Encryption Scheme) before being sent to the Baxter API. This means secret values are never transmitted or stored in plaintext — even the Baxter server itself cannot read them.
Decryption happens transparently in BellaBaxter.Client using your private key. The encryption is provided
by BellaBaxter.Crypto, which is a dependency of this package.
API coverage
| Resource | Methods |
|---|---|
| Projects | List, Get, Create, Update, Delete |
| Environments | List, Get, Create, Update, Delete |
| Secrets | List, Get, Upsert, Delete, Export (.env) |
| Providers | List, Get, Create, Update, Delete |
| Users | List, Get, Invite, Remove |
| API Keys | List, Create, Revoke |
Regenerating the client
BellaBaxter.Client is generated from the Bella Baxter OpenAPI spec using Kiota.
To regenerate after an API change:
cd apps/sdk
./generate.sh
Webhook signature verification
BellaBaxter.Client includes a WebhookSignatureVerifier for verifying HMAC-signed webhook payloads from Bella:
using BellaBaxter.Client;
var verifier = new WebhookSignatureVerifier(signingSecret: "whsec-...");
bool isValid = verifier.Verify(
payload: requestBody,
signatureHeader: Request.Headers["X-Bella-Signature"]
);
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- BellaBaxter.Crypto (>= 0.1.1-preview.77)
- Microsoft.Extensions.Configuration (>= 10.0.7)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 10.0.7)
- Microsoft.Extensions.Http (>= 10.0.7)
- Microsoft.Extensions.Http.Resilience (>= 10.5.0)
- Microsoft.Kiota.Http.HttpClientLibrary (>= 1.22.1)
- Microsoft.Kiota.Serialization.Form (>= 1.22.1)
- Microsoft.Kiota.Serialization.Json (>= 1.22.1)
- Microsoft.Kiota.Serialization.Multipart (>= 1.22.1)
- Microsoft.Kiota.Serialization.Text (>= 1.22.1)
NuGet packages (1)
Showing the top 1 NuGet packages that depend on BellaBaxter.Client:
| Package | Downloads |
|---|---|
|
BellaBaxter.AspNet.Configuration
ASP.NET Core IConfiguration provider that polls Baxter API for secrets with automatic hot-reload. |
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 0.1.1-preview.95 | 90 | 6/16/2026 |
| 0.1.1-preview.94 | 91 | 6/16/2026 |
| 0.1.1-preview.92 | 77 | 6/10/2026 |
| 0.1.1-preview.91 | 77 | 5/27/2026 |
| 0.1.1-preview.90 | 87 | 5/22/2026 |
| 0.1.1-preview.89 | 76 | 5/22/2026 |
| 0.1.1-preview.88 | 70 | 5/14/2026 |
| 0.1.1-preview.87 | 79 | 5/14/2026 |
| 0.1.1-preview.86 | 70 | 5/14/2026 |
| 0.1.1-preview.85 | 70 | 5/14/2026 |
| 0.1.1-preview.84 | 76 | 5/14/2026 |
| 0.1.1-preview.83 | 83 | 5/11/2026 |
| 0.1.1-preview.82 | 68 | 5/5/2026 |
| 0.1.1-preview.81 | 80 | 4/29/2026 |
| 0.1.1-preview.80 | 84 | 4/28/2026 |
| 0.1.1-preview.79 | 80 | 4/28/2026 |
| 0.1.1-preview.78 | 77 | 4/28/2026 |
| 0.1.1-preview.77 | 72 | 4/27/2026 |
| 0.1.1-preview.76 | 74 | 4/27/2026 |
| 0.1.1-preview.75 | 72 | 4/27/2026 |