Package access

Use this page to review who can download SDK packages. Package access is separate from an application’s permission to send data to VeriProof.

Review credentials

Administrators open Tools and SDKs, which shows credential owners, status, expiry, and permitted actions.

Administrators can revoke a Developer or CI credential. They cannot create, rotate, or reveal another person’s credential.

Check the owner and expiry before taking action. For a build credential, confirm which pipeline uses it and who maintains that pipeline.

Revoke access

Revoke a credential when its owner or build process no longer needs package access. Coordinate with the owner first: later package downloads using that credential can fail.

Revoking package access does not revoke an application’s SDK key. If that application also needs to lose ingest or policy access, manage its key separately.

Choose the right credential

CI means continuous integration: automated jobs that build and test software. Package credentials let those jobs restore SDK files. Development computers can download approved language bundles from Tools and SDKs. The separate application SDK key allows one application to send sessions and check policy.

For credential setup, status details, and troubleshooting, see Use VeriProof tools and SDKs.