**Source URL:** https://limited.veevavault.dev/vault-dx/plugins/getting-started/connecting-to-vault

# Connecting to a Vault

The `vault` plugin's `login` skill signs Claude into a Vault, classifies the target as production or sandbox, and reads its application family and API version. Every other skill uses this information to answer accurately for your specific Vault.

## Prerequisites

Have the following in place before connecting Claude Plugins to a Vault:

*   The `vault` plugin is installed. See [Installation](/vault-dx/plugins/getting-started/installation/).
*   The Vault CLI is recommended. See [Installation](/vault-dx/plugins/getting-started/installation/#prerequisites). If not installed, the skill uses the documented Vault API directly.
*   You know your sign-in method for the target Vault (SSO, API access token, or password).

## Connect to a Vault

Tell Claude which Vault to connect to:

> Sign in to my Vault. `acme-quality.veevavault.com`.

Claude will ask how you sign in to that Vault (SSO, API access token, or password) and give you the appropriate `vault login` command to run.

<Aside type="note">
Username and password sign-in does not work for SAML-federated accounts. Use SSO or an API access token instead.
</Aside>

After sign-in, Claude:

1.  Reads the environment type from `domain_type__v` (`PRODUCTION`, `SANDBOX`, `DEMO`, `TEST`, or `UNKNOWN`).
2.  Reads the application family and applications with `include_application=true`.
3.  Reads the maximum API version from `GET /api/`.
4.  States the profile once. For example: "acme-quality.veevavault.com, SANDBOX, Quality".

## Profile Persists Across the Session

The application family and applications never change for a Vault and Claude remembers them for the rest of the session. The environment type is re-read live before any write. The API version is re-read if a call is rejected for its version.

<Aside type="caution">
Against a `PRODUCTION` or `UNKNOWN` Vault, Claude does not execute writes. It reports the classification and hands you the exact command to run yourself. `UNKNOWN` means the environment check failed or returned no result, and is treated as production.
</Aside>

## Switching Vaults

To switch to a different Vault, tell Claude the new DNS:

> Connect to my production Vault. `acme-quality-prod.veevavault.com`.

Claude re-reads the classification and profile for the new Vault before any work continues.

## Next

With a Vault connected, the [Plugin Reference](/vault-dx/plugins/reference/) lists all skills available across the Veeva Claude Plugin ecosystem.

---

**Previous:** [Installation](/vault-dx/plugins/getting-started/installation)  
**Next:** [Guides](/vault-dx/plugins/guides)