---
id: veracode-api-py
version: "0.9.67"
license: MIT
license_treatment: permissive
maintenance: active
---

# veracode-api-py — Python helper library for working with the Veracode APIs. Handles retries, pagination, and other features of the modern Veracode REST APIs.

License: permissive · Maintenance: active · Downloads: 125.5K/mo

## What it is and what it does

Veracode-api-py is a Python client library that abstracts the complexity of calling Veracode's REST APIs for application security scanning and analysis. It handles credential management from files or environment variables, automatic retries, pagination across large result sets, and response parsing. The library is not an official Veracode product but is actively maintained and widely used for integrating Veracode scanning into CI/CD pipelines and custom security workflows.

The package depends on requests for HTTP communication, veracode-api-signing for request authentication, and standard libraries like Pygments, idna, and certifi. It supports Python versions greater than 3.7. Most API methods return structured data, and the library provides both a unified VeracodeAPI class and individual API classes for granular control. Different Veracode API calls require different user roles or permissions, which the library does not enforce—that responsibility falls to the Veracode account configuration.

Use it for:

- Integrate Veracode security scans into CI/CD pipelines to automate application security testing.
- Build custom dashboards or reporting tools that aggregate Veracode scan results across multiple applications.
- Query Veracode APIs from behind corporate proxies without manually handling authentication headers.
- Develop internal security tools that fetch application metadata or scan status from Veracode.
- Automate security workflows that depend on Veracode API responses in custom scripts.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides a Python wrapper for Veracode REST APIs with built-in handling for retries, pagination, and credential management.

Yes. The package is actively maintained, has low install friction, carries a permissive MIT license, and solves a real problem for teams using Veracode. It has no known security vulnerabilities and is widely downloaded. Install it if you need to programmatically interact with Veracode APIs; skip it if you only use Veracode's web UI.

## Install

pip install veracode-api-py
uv add veracode-api-py
poetry add veracode-api-py

## Installing veracode-api-py

Before you install: Low install friction with a pure-Python wheel distribution. Actively maintained with recent releases; repository shows ongoing development and accepts contributions.

License in practice: MIT license permits commercial and private use with minimal restrictions; suitable for most projects without licensing concerns.

Quickstart:

pip install veracode-api-py

from veracode_api_py import VeracodeAPI

api = VeracodeAPI()
result = api.get_applications()

Requires Veracode API credentials via ~/.veracode/credentials file or VERACODE_API_KEY_ID and VERACODE_API_KEY_SECRET environment variables.

Verify before relying:

- Completeness of Veracode API method coverage and whether all current REST API endpoints are supported.
- Proxy authentication support details and any limitations with corporate proxy setups.
- Whether the library enforces role-based access control or relies entirely on Veracode account configuration.

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 125.5K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

veracode api client, veracode rest api wrapper, application security scanning api, veracode authentication library, api retry and pagination handler, veracode credentials management, security-scanning, api-client, ci-cd-integration

[View on SkillFed](https://skillfed.io/packages/veracode-api-py) · [View on PyPI](https://pypi.org/project/veracode-api-py/)