# Veracode

**Canonical:** https://apis.io/providers/veracode/  
**Website:** https://www.veracode.com/  
**APIs profiled:** 11

Veracode is an application security testing (AST) platform offering static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), manual penetration testing, and developer security training. The Veracode Platform provides a comprehensive suite of REST APIs enabling organizations to automate security testing, access findings, manage policies, generate reports, and administer users and teams. All REST APIs use HMAC authentication with API ID/key credentials and return JSON responses following OpenAPI standards.

## Kin Score — 39.6 / 100 (developing)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 39.6).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 68.8 |
| Governance | 13.6 |
| Contract Governance | 13.6 |
| Operational Transparency | 7.9 |
| Developer Ergonomics | 40.5 |
| Commercial Clarity | 21.1 |
| Access Clarity | 21.1 |

## Agent readiness — 19.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Enterprise · Self-serve signup — onboarding: self-serve, pricing: enterprise, trial: no (confidence: high).

## APIs (11)

- **Veracode API Credentials API** — API credential lifecycle management
- **Veracode Applications API** — Application profile management
- **Veracode Business Units API** — Business unit management
- **Veracode Findings API** — Application security findings
- **Veracode Manual Penetration Testing API** — Manual penetration test findings
- **Veracode Policy Evaluations API** — Application policy compliance evaluations
- **Veracode Reports API** — Asynchronous report generation and retrieval
- **Veracode Roles API** — Role and permission management
- **Veracode Sandboxes API** — Development sandbox management
- **Veracode Teams API** — Team management
- **Veracode Users API** — User and API service account management

## Agentic access (1)

- **Veracode Agentic Access** — 33 operations · 14 acting · 1 human-in-the-loop

## Security (4)

- **Veracode Authentication** — http · 1 scheme
- **Veracode Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Veracode Vulnerability Disclosure** — disclosure policy published
- **Veracode Trust Center** — SOC 2, FedRAMP, GDPR

## Plans (1)

- **Veracode Plans Pricing**

## Tags

Application Security, SAST, DAST, SCA, Security Testing, DevSecOps

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/veracode/). Scores are computed from the provider's own public artifacts under a published rubric.