Google Cloud Key Management Service: Node.js Client

release levelnpm versioncodecov

Google Cloud Key Management Service (KMS) API client for Node.js

A comprehensive list of changes in each version may be found inthe CHANGELOG.

Read more about the client libraries for Cloud APIs, including the olderGoogle APIs Client Libraries, inClient Libraries Explained.

Table of contents:

Quickstart

Before you begin

  1. Select or create a Cloud Platform project.
  2. Enable billing for your project.
  3. Enable the Google Cloud Key Management Service API.
  4. Set up authentication with a service account so you can access theAPI from your local workstation.

Installing the client library

npm install @google-cloud/kms

Using the client library

//// TODO(developer): Uncomment these variables before running the sample.//// const projectId = 'my-project';// const locationId = 'us-east1';// Imports the Cloud KMS libraryconst {KeyManagementServiceClient} = require('@google-cloud/kms');// Instantiates a clientconst client = newKeyManagementServiceClient();// Build the location nameconst locationName = client.locationPath(projectId, locationId);async function listKeyRings() {  const [keyRings] = await client.listKeyRings({    parent: locationName,  });  for (const keyRing of keyRings) {    console.log(keyRing.name);  }  return keyRings;}return listKeyRings();

Samples

Samples are in thesamples/ directory. Each sample'sREADME.md has instructions for running its sample.

SampleSource CodeTry it
Create Key Asymmetric Decryptsource codeOpen in Cloud Shell
Create Key Asymmetric Signsource codeOpen in Cloud Shell
Create Key Hsmsource codeOpen in Cloud Shell
Create Key Labelssource codeOpen in Cloud Shell
Create Key Macsource codeOpen in Cloud Shell
Create Key Ringsource codeOpen in Cloud Shell
Create Key Rotation Schedulesource codeOpen in Cloud Shell
Create Key Symmetric Encrypt Decryptsource codeOpen in Cloud Shell
Create Key Versionsource codeOpen in Cloud Shell
Decrypt Asymmetricsource codeOpen in Cloud Shell
Decrypt Symmetricsource codeOpen in Cloud Shell
Destroy Key Versionsource codeOpen in Cloud Shell
Disable Key Versionsource codeOpen in Cloud Shell
Enable Key Versionsource codeOpen in Cloud Shell
Encrypt Asymmetricsource codeOpen in Cloud Shell
Encrypt Symmetricsource codeOpen in Cloud Shell
Generate Random Bytessource codeOpen in Cloud Shell
Get Key Labelssource codeOpen in Cloud Shell
Get Key Version Attestationsource codeOpen in Cloud Shell
Get Public Keysource codeOpen in Cloud Shell
Iam Add Membersource codeOpen in Cloud Shell
Iam Get Policysource codeOpen in Cloud Shell
Iam Remove Membersource codeOpen in Cloud Shell
Quickstartsource codeOpen in Cloud Shell
Restore Key Versionsource codeOpen in Cloud Shell
Sign Asymmetricsource codeOpen in Cloud Shell
Sign Macsource codeOpen in Cloud Shell
Update Key Add Rotationsource codeOpen in Cloud Shell
Update Key Remove Labelssource codeOpen in Cloud Shell
Update Key Remove Rotationsource codeOpen in Cloud Shell
Update Key Set Primarysource codeOpen in Cloud Shell
Update Key Update Labelssource codeOpen in Cloud Shell
Verify Asymmetric Ecsource codeOpen in Cloud Shell
Verify Asymmetric Rsasource codeOpen in Cloud Shell
Verify Macsource codeOpen in Cloud Shell

TheGoogle Cloud Key Management Service Node.js Client API Reference documentationalso contains samples.

Supported Node.js Versions

Our client libraries follow theNode.js release schedule.Libraries are compatible with all currentactive andmaintenance versions ofNode.js.

Client libraries targeting some end-of-life versions of Node.js are available, andcan be installed via npmdist-tags.The dist-tags follow the naming conventionlegacy-(version).

Legacy Node.js versions are supported as a best effort:

  • Legacy versions will not be tested in continuous integration.
  • Some security patches may not be able to be backported.
  • Dependencies will not be kept up-to-date, and features will not be backported.

Legacy tags available

  • legacy-8: install client libraries from this dist-tag for versionscompatible with Node.js 8.

Versioning

This library followsSemantic Versioning.

This library is considered to beGeneral Availability (GA). This means itis stable; the code surface will not change in backwards-incompatible waysunless absolutely necessary (e.g. because of critical security issues) or withan extensive deprecation period. Issues and requests againstGA librariesare addressed with the highest priority.

More Information:Google Cloud Platform Launch Stages

Contributing

Contributions welcome! See theContributing Guide.

Please note that thisREADME.md, thesamples/README.md,and a variety of configuration files in this repository (including.nycrc andtsconfig.json)are generated from a central template. To edit one of these files, make an editto its template in thisdirectory.

License

Apache Version 2.0

SeeLICENSE

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-10-30 UTC.