---
id: veracode-api-signing
version: "26.5.0"
license: MIT
license_treatment: permissive
maintenance: active
---

# veracode-api-signing — Easily sign any request destined for the Veracode API Gateway

License: permissive · Maintenance: active · Downloads: 727.8K/mo

## What it is and what it does

Veracode-api-signing is a Python library that automates the signing of HTTP requests sent to Veracode's API Gateway. It handles the cryptographic authentication required by Veracode's API, allowing developers to make authenticated API calls without manually constructing signed headers. The package is built on top of standard HTTP libraries (requests, httpie) and integrates with common Python tooling.

The library is maintained as production-stable and supports modern Python versions (3.10 through 3.14). It's designed as a utility for developers integrating with Veracode's security scanning and analysis APIs, reducing the friction of implementing API authentication by hand.

Use it for:

- Automating Veracode API calls from CI/CD pipelines without manually constructing authentication headers
- Building custom security scanning workflows that interact with Veracode's platform programmatically
- Integrating Veracode security checks into application deployment automation

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Signs HTTP requests destined for the Veracode API Gateway, handling authentication credentials and request signing automatically.

Yes, if you are integrating with Veracode's API. The package is actively maintained, has low install friction, carries a permissive MIT license, and has no known vulnerabilities. It's a straightforward utility for a specific use case—Veracode API authentication—and is worth installing only if that's your need.

## Install

pip install veracode-api-signing
uv add veracode-api-signing
poetry add veracode-api-signing

## Installing veracode-api-signing

Before you install: Low friction installation with a pure Python wheel. Active maintenance status with a recent release (79 days ago). Depends on common, stable libraries: docopt, httpie, pip, requests, and setuptools.

License in practice: MIT license is permissive, allowing use in commercial and proprietary projects with minimal restrictions beyond attribution.

Quickstart:

pip install veracode-api-signing

import veracode_api_signing
# Use with requests or httpie to sign Veracode API calls

Requires Python 3.10 or later; depends on requests library for HTTP functionality.

Verify before relying:

- Whether this package is intended for direct use or primarily as a plugin/dependency for other Veracode tools
- Specific authentication flow details and whether it integrates with existing HTTP clients or requires wrapper code

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 727.8K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

veracode api authentication, api request signing, http request signing library, veracode gateway signing, api credential handling, api-authentication, veracode-integration

[View on SkillFed](https://skillfed.io/packages/veracode-api-signing) · [View on PyPI](https://pypi.org/project/veracode-api-signing/)