az functionapp function keys list doesn't return anything

[ichivers]

Describe the bug

This command doesn't return anything in version 2.87:

az functionapp keys list --name func-develo-single-7k3jxc --resource-group rg-develo-development --query functionKeys | ConvertFrom-Json

In version 2.73.0 it correcly returns:

"OUT/***************************************************=="

Related command

az functionapp keys list --name func-develo-single-7k3jxc --resource-group rg-develo-development --query functionKeys | ConvertFrom-Json

Errors

No error message and no results.

Issue script & Debug output

cli.knack.cli: Command arguments: ['functionapp', 'function', 'keys', 'list', '--name', 'func-develo-single-7k3jxc', '--resource-group', 'rg-develo-development', '--function-name', 'ProcessDataImport', '--query', 'default', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000200CD089C60>, <function OutputProducer.on_global_arguments at 0x00000200CD221D00>, <function CLIQuery.on_global_arguments at 0x00000200CD26FD80>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Using packaged command index for profile 'latest'.
cli.azure.cli.core: Modules found from index for 'functionapp': ['azure.cli.command_modules.appservice', 'azure.cli.command_modules.serviceconnector']
cli.azure.cli.core: Loading command modules...
cli.azure.cli.core: Loaded command modules in parallel:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: serviceconnector 0.170 20 331
cli.azure.cli.core: appservice 0.276 91 303
cli.azure.cli.core: Total (2) 0.280 111 634
cli.azure.cli.core: Loaded 109 groups, 634 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : functionapp function keys list
cli.azure.cli.core: Command table: functionapp function keys list
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x00000200CD823420>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\IanChivers.azure\commands\2026-06-17.16-31-49.functionapp_function_keys_list.4064.log'.
az_command_data_logger: command args: functionapp function keys list --name {} --resource-group {} --function-name {} --query {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x00000200CD8784A0>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x00000200CD878AE0>, <function register_global_policy_argument..add_global_policy_argument at 0x00000200CD878C20>, <function register_cache_arguments..add_cache_arguments at 0x00000200CD878CC0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x00000200CD878D60>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x00000200CD221DA0>, <function CLIQuery.handle_query_parameter at 0x00000200CD26FE20>, <function register_ids_argument..parse_ids_arguments at 0x00000200CD878B80>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=WebSiteManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\IanChivers\.azure\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users\IanChivers.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: e7882747-4bf2-4517-b694-24082dc72f69
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/xxxxxx/resourceGroups/rg-develo-development/providers/Microsoft.Web/sites/func-develo-single-7k3jxc/functions/ProcessDataImport/listkeys?api-version=2025-05-01'
cli.azure.cli.core.sdk.policies: Request method: 'POST'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'a8672fc4-6a61-11f1-87f4-7c1e52265318'
cli.azure.cli.core.sdk.policies: 'CommandName': 'functionapp function keys list'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --resource-group --function-name --query --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://mana****/resourceGroups/rg-develo-development/providers/Microsoft.Web/sites/func-develo-single-7k3jxc/functions/ProcessDataImport/listkeys?api-version=2025-05-01 HTTP/1.1" 200 70
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '70'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '5ef614ac-8404-47a6-8d5d-ba5acaaee931'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'tenantIdxxx,objectId=f16e0d65-4e35-4d79-8246-ac0fd7804a6c/westeurope/685ad14f-5ad2-4a8d-8c5c-021ba97269bb'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '9c9067b7-a8f2-4aee-95d8-2377895b2b79'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260617T153150Z:9c9067b7-a8f2-4aee-95d8-2377895b2b79'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: B2651DCAB8B04A52A5B62F8FC91D6B76 Ref B: AMS231020512027 Ref C: 2026-06-17T15:31:50Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 17 Jun 2026 15:31:49 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"default":"OUT/************************=="}
cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x00000200CD878860>, <function x509_from_base64_to_hex_transform at 0x00000200CD878900>]
cli.knack.cli: Event: CommandInvoker.OnFilterResult [<function CLIQuery.handle_query_parameter..filter_output at 0x00000200D2E44220>]
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x00000200CD8236A0>]
az_command_data_logger: exit code: 0
cli.main: Command ran in 1.521 seconds (init: 0.140, invoke: 1.380)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3973 in cache file under C:\Users\IanChivers.azure\telemetry\20260617163150893
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry_init.pyc C:\Users\IanChivers.azure C:\Users\IanChivers.azure\telemetry\20260617163150893"
telemetry.process: Return from creating process 16520
telemetry.main: Finish creating telemetry upload process.

Expected behavior

Should return "OUT/***************************************************=="

Environment Summary

azure-cli 2.87.0

core 2.87.0
telemetry 1.1.0

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\IanChivers.azure'
Extensions directory 'C:\Users\IanChivers.azure\cliextensions'

Python (Windows) 3.13.13 (tags/v3.13.13:01104ce, Apr 7 2026, 19:25:48) [MSC v.1944 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

From the debug looks like it does get the key but doesn't output it from the command.

[yonzhan]

Thank you for opening this issue, we will look into it.