Fortinet · Rate Limits

Fortinet Rate Limits

Fortinet device APIs (FortiOS REST, FortiManager JSON-RPC, FortiAnalyzer) execute against the customer-owned device or VM and are bound by device CPU/RAM rather than a platform-imposed RPS quota. FortiCloud SaaS APIs are subject to per-tenant throttles set per subscription tier. Numeric limits are not publicly published.

Fortinet Rate Limits is the machine-readable rate-limit profile for Fortinet on the APIs.io network, in the API Commons Rate Limits shape.

It captures 2 rate-limit definitions, measuring requests_per_second and varies.

An exhausted limit returns HTTP 429.

This profile was written by API Evangelist and has not been verified against a page the provider published; treat every limit as unconfirmed until a dated transcription replaces it.

The profile also includes 4 backoff/retry policies defined and response codes documented for throttled and serviceUnavailable.

Tagged areas include Cybersecurity, Networking, Firewall, and Rate Limiting.

2 Limits Exhausted: HTTP 429
Method: generated, dated 2026-05-05.
Written by API Evangelist on 2026-05-05 and not verified against a page the provider published. Treat every limit as unconfirmed until a dated transcription replaces it.
View Source
CybersecurityNetworkingFirewallRate Limiting

Limits

FortiOS / FortiManager / FortiAnalyzer device API device
requests_per_second
bound by device CPU/memory; no platform-imposed quota
FortiCloud SaaS API per-tenant throttle tenant/api-key
varies
per-tenant subscription tier; not publicly published

Policies

Backoff Strategy
Clients should implement exponential backoff with jitter on 429/5xx and honor Retry-After when present.
Session-Based Auth
Most Fortinet device APIs use session-based authentication; persist sessions across calls rather than re-authenticating per request to avoid log churn and device-CPU pressure.
Device Capacity Planning
Sustained API load against FortiGate/FortiManager directly impacts data-plane CPU; size capacity and offload heavy queries to FortiAnalyzer where possible.
HA / Cluster Routing
Direct API calls only to the active node in an HA cluster; queries to standby nodes return inconsistent state.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/fortinet-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.