Veeva Systems Authentication API

openapi: 3.1.0
info:
  title: Veeva Vault Authentication API
  version: '26.1'
  description: Minimal OpenAPI for the Veeva Vault Platform REST API covering authentication, session management, version discovery, VQL queries, MDL execution, metadata components, Direct Data files, and delegated sessions.
  x-generated-from: https://developer.veevavault.com/api/26.1/
  x-generated-by: claude-crawl-2026-05-08
servers:
- url: https://{vaultDNS}/api/{version}
  description: Vault REST API
  variables:
    vaultDNS:
      default: myvault.veevavault.com
      description: Customer Vault DNS hostname
    version:
      default: v26.1
      description: API version
security:
- SessionId: []
tags:
- name: Authentication
paths:
  /auth:
    post:
      tags:
      - Authentication
      summary: Authenticate using Vault user name and password
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              properties:
                username:
                  type: string
                password:
                  type: string
      responses:
        '200':
          description: Session created
          content:
            application/json:
              schema:
                type: object
  /keep-alive:
    post:
      tags:
      - Authentication
      summary: Refresh an active session to extend its duration
      responses:
        '200':
          description: Session refreshed
          content:
            application/json:
              schema:
                type: object
  /session:
    delete:
      tags:
      - Authentication
      summary: End the authenticated user's API session
      responses:
        '200':
          description: Session ended
          content:
            application/json:
              schema:
                type: object
  /delegation/login:
    post:
      tags:
      - Authentication
      summary: Generate a delegated session ID for another user
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              properties:
                delegator_userid:
                  type: string
      responses:
        '200':
          description: Delegated session
          content:
            application/json:
              schema:
                type: object
components:
  securitySchemes:
    SessionId:
      type: apiKey
      in: header
      name: Authorization
      description: Vault Session ID returned by /auth, sent as the Authorization header.