Cisco Secure Access API Rate Limits

Rate Limits

The Secure Access API limits the number of requests that you can make within a time period. Rate limits apply to either the number of API requests that you make for your organization or the number of API requests made using a specific Secure Access API key. Rate limits may vary by API scope and resource.

Admin

Endpoints in the admin API scope follow these general guidelines for rate limits:

  • 5 requests per second
  • 14 requests per minute
  • 350 requests per 30 minutes

Rate limits apply to an individual API key.

Auth

The Secure Access Token Authorization API endpoint follows these general guidelines for rate limits:

  • 20 requests per minute

Rate limits apply to an individual API key.

Deployments

API endpoints in the deployments API scope except for the Network Tunnel Groups and Regions API follow these general guidelines for rate limits:

  • 5 requests per second
  • 14 requests per minute
  • 350 requests per 30 minutes

Rate limits apply to an individual API key.

Network Tunnel Groups and Regions

The Secure Access Network Tunnel Groups and Regions API endpoints follow these general guidelines for rate limits:

  • 3000 requests per minute

Rate limits apply to an individual API key.

Policies

API endpoints in the policies API scope follow these general guidelines for rate limits:

  • 2000 requests per minute
  • 6000 requests per hour

Rate limits apply to an individual API key.

Reports

Rate limits vary by API resource.

Reporting

The Secure Access Reporting API endpoints follow these general guidelines for rate limits:

  • 5 requests per second

Rate limits apply to an individual API key.

App Discovery

The Secure Access App Discovery API endpoints follow these general guidelines for rate limits:

  • 10 requests per second

Rate limits apply to an individual API key.

API Usage

The Secure Access API Usage API endpoints follow these general guidelines for rate limits:

  • 2000 requests per minute
  • 6000 requests per hour

Rate limits apply to an individual API key.