Veeva · Rate Limits

Veeva Rate Limits

Vault enforces three distinct rate limits, all documented. The general Burst Limit is a per-Vault ceiling over a fixed 5-minute window; exceeding it DELAYS responses for the rest of the window rather than rejecting them. The Auth API Burst Limit is a separate 1-minute window keyed on username + vaultDNS; it begins delaying at 50% and FAILS requests once fully consumed. The Job Status endpoint is capped at one call per job_id per 10 seconds and returns API_LIMIT_EXCEEDED. Veeva does not publish the numeric ceiling for any Vault — the actual value is tenant-specific and is returned per-request in X-VaultAPI-BurstLimit. As of v21.1 Vault enforces no daily limit at all.

Veeva Rate Limits is the rate-limit profile for Veeva on the APIs.io network — every limit transcribed verbatim from the provider’s own documentation on 2026-10-12.

It captures 3 rate-limit definitions, including Burst Limit — Burst Limit is the number of API calls that your Vault can receive within a fixed 5-minute period.; Auth API Burst Limit — Auth API Burst Limit is the number of calls that your Vault can make to /api/{version}/auth in a one (1) minute period.; Job Status API Rate Limit — which is one (1) call every 10 seconds..

Limit state is signalled in the X-VaultAPI-BurstLimit, X-VaultAPI-BurstLimitRemaining, and X-VaultAPI-ResponseDelay response headers.

The profile also includes 5 backoff/retry policies defined.

Tagged areas include Life Sciences, SaaS, and Rate Limiting.

3 Limits X-VaultAPI-BurstLimitX-VaultAPI-BurstLimitRemainingX-VaultAPI-ResponseDelay
Transcribed from the provider's documentation on 2026-10-12 — general.veevavault.dev/vault-api/references/api-rate-limits.
View Source
Life SciencesSaaSRate Limiting

Limits

Burst Limit per-vault
Burst Limit is the number of API calls that your Vault can receive within a fixed 5-minute period.
· per 5 minutes
tenant-specific; read X-VaultAPI-BurstLimit on any response
Auth API Burst Limit per-username-and-vaultDNS
Auth API Burst Limit is the number of calls that your Vault can make to /api/{version}/auth in a one (1) minute period.
/api/{version}/auth
· per 1 minute
tenant-specific; read X-VaultAPI-BurstLimit on the /auth response
Job Status API Rate Limit per-job
which is one (1) call every 10 seconds.
/api/{version}/services/jobs/{job_id}
· per 10 seconds
1
The burst-limit headers are not meaningful on this endpoint.

Policies

Read the burst headers
The numeric ceiling is not published; X-VaultAPI-BurstLimit on every response is the authoritative value for that Vault.
Avoid unnecessary auth calls
A session ID with a 20-minute idle timeout only expires if unused for 20 minutes after the last request completes.
Cache configuration data
Configuration data changes rarely; retrieve once and store locally.
Prefer bulk endpoints
A single bulk call can create 500 object records; bulk endpoints are the primary lever for staying inside the burst window.
Regulate request rate
Monitor X-VaultAPI-BurstLimitRemaining and throttle client-side before hitting the ceiling.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/veeva-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.