Snyk · Rate Limits

Snyk Rate Limits

Snyk applies a per-token request-rate limit to both the REST and V1 APIs. Numeric ceilings are not exhaustively published; documented behaviour is that 429 Too Many Requests is returned when the bucket is exhausted, with Retry-After indicating when the caller may resume. Free and Team tier API access varies - per Snyk auth docs Free and Team users cannot use personal access tokens for API calls; Enterprise/Ignite use service accounts for automation. Regional endpoints serve US, EU, and AU traffic.

Snyk Rate Limits is the machine-readable rate-limit profile for Snyk on the APIs.io network, conforming to the API Commons Rate Limits specification.

It captures 3 rate-limit definitions, measuring requests, tier_eligibility, and export_jobs.

The profile also includes 4 backoff/retry policies defined and response codes documented for throttled, unauthorized, and serverError.

Tagged areas include Security, DevSecOps, Vulnerability Management, Application Security, and Rate Limiting.

3 Limits Throttle: 429
SecurityDevSecOpsVulnerability ManagementApplication SecurityRate LimitingThrottling

Limits

Per-Token Throttle token
requests · minute
dynamic
Snyk applies per-token rate limits. The numeric ceiling is not published; 429 is returned when exceeded.
Free / Team Personal Token API Access token
tier_eligibility
restricted
Free and Team plans do not permit personal access tokens to call the API for automation. Use of the API is gated to Enterprise (and Ignite) plans, with service accounts recommended for non-interactive use.
Bulk Export Job Concurrency organization
export_jobs
dynamic
Issue and dependency exports are processed asynchronously; only a small number of concurrent exports per organization are accepted before subsequent jobs queue.

Policies

429 Throttling
When the per-token bucket is exhausted Snyk returns 429 Too Many Requests with a Retry-After header indicating the wait time.
Backoff Strategy
Implement exponential backoff with jitter on 429 and 5xx responses. Cache idempotent reads (org list, project list) and prefer the bulk Export API for large exports rather than paginating individual issue lists.
Service Accounts For Automation
Use a service account scoped to an organization or group for CI/CD and automation flows; reserve personal tokens for interactive CLI/IDE use.
Regional Endpoint Selection
Use the regional endpoint matching your tenant's region - api.snyk.io (US), api.eu.snyk.io (EU), or api.au.snyk.io (AU) - to comply with data residency.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/snyk-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.