You can always revoke Veracode API credentials, if necessary. By default, the Veracode API credentials expire after one calendar year, unless a Veracode administrator resets the expiration date.
You can also revoke API credentials with the Identity APIs.
Log in to the Veracode Platform.
Go to the user account menu and select API Credentials.
Click Revoke API Credentials.
The credentials expire immediately after you revoke them.