CyberArk · Rate Limits

Cyberark Rate Limits

CyberArk REST APIs (PAM Self-Hosted, Privilege Cloud, Identity, Conjur) are tenant- or vault-scoped and do not publish fixed numeric rate limits. Conjur enforces a configurable throttle for token issuance; Privilege Cloud and Identity throttle abusive clients via 429.

Cyberark Rate Limits is the machine-readable rate-limit profile for CyberArk on the APIs.io network, in the API Commons Rate Limits shape.

It captures 4 rate-limit definitions, measuring varies and requests_per_second.

An exhausted limit returns HTTP 429.

This profile was written by API Evangelist and has not been verified against a page the provider published; treat every limit as unconfirmed until a dated transcription replaces it.

The profile also includes 3 backoff/retry policies defined and response codes documented for throttled and serviceUnavailable.

Tagged areas include Identity Security, Privileged Access Management, Secrets Management, and Rate Limiting.

4 Limits Exhausted: HTTP 429
Method: generated, dated 2026-05-05.
Written by API Evangelist on 2026-05-05 and not verified against a page the provider published. Treat every limit as unconfirmed until a dated transcription replaces it.
View Source
Identity SecurityPrivileged Access ManagementSecrets ManagementRate Limiting

Limits

PAM Self-Hosted REST API tenant
varies
depends on customer-deployed PVWA / CPM capacity (self-hosted)
Privilege Cloud REST API tenant
varies
see CyberArk Privilege Cloud documentation
Identity REST API tenant
varies
see CyberArk Identity API reference
Conjur token issuance tenant
requests_per_second
configurable per Conjur deployment (authn-throttle)

Policies

Token caching
Conjur and Identity authentication tokens should be cached and reused until expiry rather than minted per request to stay under throttles.
Backoff Strategy
Honor 429 / 503 with exponential backoff and jitter; retry idempotent reads only.
Self-hosted vs SaaS
Self-Hosted limits depend on customer-deployed PVWA / CPM sizing; SaaS limits are tenant-scoped by CyberArk.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/cyberark-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.