API Rate Limit Summary

Secure Internet and SaaS Access (ZIA) Help
ZIA API
API Developer & Reference Guide
Reference Guide
API Rate Limit Summary

Understanding ZIA APIs

API Developer & Reference Guide
- Reference Guide
  - API Rate Limit Summary
- Working with APIs

API Rate Limit Summary

The following table summarizes the Zscaler Internet Access (ZIA) API resources and their rate limits for each method.

Rate limits are subject to change. To learn more, see Understanding Rate Limiting.

- 1/sec and 400/hr

Resource URI

GET (read)

POST (create)

PUT (update)

DELETE

/adminRoles

2/sec and 1000/hr

1/sec and 400/hr

/adminRoles/{roleId}

2/sec and 1000/hr

1/sec and 400/hr

/adminRoles/lite

2/sec and 1000/hr

/adminUsers

2/sec and 1000/hr

1/sec and 400/hr

/adminUsers/{userId}

1/sec and 400/hr

/adminUsers/me

2/sec and 1000/hr

/advancedSettings

2/sec and 1000/hr

1/sec and 400/hr

/advancedUrlFilterAndCloudAppSettings

2/sec and 1000/hr

1/sec and 400/hr

/app_view/{appViewId}/apps

25/day (Trial) or 1,000/day (License)

/app_views/list

25/day (Trial) or 1,000/day (License)

/apps/app

25/day (Trial) or 1,000/day (License)

/apps/search

25/day (Trial) or 1,000/day (License)

/auditlogEntryReport

2/sec and 1000/hr

10/min and 40/hr

2/sec and 1000/hr

/auditlogEntryReport/download

2/sec and 1000/hr

/authenticatedSession

2/sec and 1000/hr

/authSettings

2/sec and 1000/hr

1/sec and 400/hr

/authSettings/exemptedUrls

2/sec and 1000/hr

1/sec and 400/hr

/authSettings/lite

2/sec and 1000/hr

/behavioralAnalysisAdvancedSettings

2/sec and 1000/hr

1/sec and 400/hr

/behavioralAnalysisAdvancedSettings/fileHashCount

2/sec and 1000/hr

/browserIsolation/profiles

2/sec and 1000/hr

/cloudApplications/bulkUpdate

1/min and up to 4/hr

/cloudApplications/lite

2/sec and up to 1000/hr

/cloudApplications/policy

2/sec and up to 1000/hr

/cloudApplications/sslPolicy

2/sec and up to 1000/hr

/customTags

2/sec and up to 1000/hr

/cyberThreatProtection/advancedThreatSettings

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/atpMalwareInspection

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/atpMalwareProtocols

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/maliciousUrls

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/malwarePolicy

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/malwareSettings

2/sec and 1000/hr

1/sec and 400/hr

/cyberThreatProtection/securityExceptions

2/sec and 1000/hr

1/sec and 400/hr

/departments

2/sec and 1000/hr

1/sec and 400/hr

/departments/{departmentId}

1/sec and 400/hr

/departments/{id}

2/sec and 1000/hr

/departments/lite

2/sec and 1000/hr

/departments/lite/{id}

2/sec and 1000/hr

/deviceGroups

2/sec and 1000/hr

/deviceGroups/devices

2/sec and 1000/hr

/deviceGroups/devices/lite

2/sec and 1000/hr

/dlpDictionaries

2/sec and 1000/hr

1/sec and 400/hr

/dlpDictionaries/{dictId}/predefinedIdentifiers

2/sec and 1000/hr

/dlpDictionaries/{dlpDictId}

2/sec and 1000/hr

1/sec and 400/hr

/dlpDictionaries/lite

2/sec and 1000/hr

/dlpDictionaries/validateDlpPattern

1/sec and 400/hr

/dlpEngines

2/sec and 1000/hr

1/sec and 400/hr

/dlpEngines/{dlpEngineId}

2/sec and 1000/hr

1/sec and 400/hr

/dlpEngines/lite

2/sec and 1000/hr

/dlpEngines/validateDlpExpr

1/sec and 400/hr

/dlpExactDataMatchSchemas

2/sec and 1000/hr

/dlpExactDataMatchSchemas/lite

2/sec and 1000/hr

/dlpNotificationTemplates

2/sec and 1000/hr

1/sec and 400/hr

/dlpNotificationTemplates/{templateId}

2/sec and 1000/hr

1/sec and 400/hr

/dlpNotificationTemplates/lite

2/sec and 1000/hr

/eun

2/sec and up to 1000/hr

1/sec and up to 400/hr

/eventlogEntryReport

2/sec and 1000/hr

/eventlogEntryReport/download

2/sec and 1000/hr

/exportPolicies

1/hr and up to 8/day

/extranet

1/sec and up to 400/hr

10/min and up to 40/hr

/extranet/{id}

1/sec and up to 400/hr

10/min and up to 40/hr

/extranet/lite

1/sec and up to 400/hr

/fileTypeRules

2/sec and 1000/hr

1/sec and 400/hr

/fileTypeRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/fileTypeRules/lite

2/sec and 1000/hr

/firewallDnsRules

2/sec and 1000/hr

1/sec and 400/hr

/firewallDnsRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/firewallFilteringRules

2/sec and 1000/hr

1/sec and 400/hr

/firewallFilteringRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/firewallIpsRules

2/sec and 1000/hr

1/sec and 400/hr

/firewallIpsRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/forwardingRules

2/sec and up to 1000/hr

1/sec and up to 400/hr

/forwardingRules/{ruleId}

2/sec and up to 1000/hr

1/sec and up to 400/hr

/greTunnels

2/sec and 1000/hr

1/sec and 400/hr

/greTunnels/{id}

1/sec and 400/hr

/greTunnels/availableInternalIpRanges

2/sec and 1000/hr

/groups

1/sec and 400/hr

/groups

2/sec and 1000/hr

/groups/{groupId}

2/sec and 1000/hr

1/sec and 400/hr

/groups/{groupId}

2/sec and 1000/hr

/groups/lite

2/sec and 1000/hr

/icapServers

2/sec and 1000/hr

/icapServers/{icapServerId}

2/sec and 1000/hr

/icapServers/lite

2/sec and 1000/hr

/idmprofile

2/sec and 1000/hr

/idmprofile/{profileId}

2/sec and 1000/hr

/idmprofile/lite

2/sec and 1000/hr

/incidentReceiverServers

2/sec and 1000/hr

/incidentReceiverServers/{incidentReceiverServerId}

2/sec and 1000/hr

/incidentReceiverServers/lite

2/sec and 1000/hr

/intermediateCaCertificate

2/sec and 1000/hr

1/sec and 400/hr

/intermediateCaCertificate/{certId}

2/sec and 1000/hr

1/sec and 400/hr

1/min and 4/hr

/intermediateCaCertificate/downloadAttestation/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/downloadCsr/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/downloadPublicKey/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/finalizeCert/{certId}

1/min and 4/hr

/intermediateCaCertificate/generateCsr/{certId}

1/min and 4/hr

/intermediateCaCertificate/KeyPair/{certId}

1/min and 4/hr

/intermediateCaCertificate/lite

2/sec and 1000/hr

/intermediateCaCertificate/lite/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/makeDefault/{certId}

1/sec and 400/hr

/intermediateCaCertificate/readyToUse

2/sec and 1000/hr

/intermediateCaCertificate/showCert/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/showCsr/{certId}

2/sec and 1000/hr

/intermediateCaCertificate/uploadcert/{certId}

1/min and 4/hr

/intermediateCaCertificate/uploadcertchain/{certId}

1/min and 4/hr

/intermediateCaCertificate/verifyKeyAttestation/{certId}

1/min and 4/hr

/iotDiscovery/categories

2/sec and up to 1000/hr

/iotDiscovery/classifications

2/sec and up to 1000/hr

/iotDiscovery/deviceList

1/min and up to 4/hr

/iotDiscovery/deviceTypes

2/sec and up to 1000/hr

/ipAddresses

2/sec and 1000/hr

/ipDestinationGroups

2/sec and 1000/hr

1/sec and 400/hr

/ipDestinationGroups/{ipGroupId}

2/sec and 1000/hr

1/sec and 400/hr

/ipDestinationGroups/ipv6DestinationGroups

2/sec and 1000/hr

/ipDestinationGroups/ipv6DestinationGroups/lite

2/sec and 1000/hr

/ipDestinationGroups/lite

2/sec and 1000/hr

/ipSourceGroups

2/sec and 1000/hr

1/sec and 400/hr

/ipSourceGroups/{ipGroupId}

2/sec and 1000/hr

1/sec and 400/hr

/ipSourceGroups/ipv6SourceGroups

2/sec and 1000/hr

/ipSourceGroups/ipv6SourceGroups/lite

2/sec and 1000/hr

/ipSourceGroups/lite

2/sec and 1000/hr

/ipv6config

2/sec and 1000/hr

/ipv6config/dns64prefix

2/sec and 1000/hr

/ipv6config/nat64prefix

2/sec and 1000/hr

/locations

2/sec and 1000/hr

1/sec and 400/hr

/locations/{locationId}

2/sec and 1000/hr

1/sec and 400/hr

/locations/{locationId}/sublocations

2/sec and 1000/hr

/locations/bulkDelete

1/min and 4/hr
(100 locations per call)

/locations/groups

2/sec and 1000/hr

/locations/groups/{id}

2/sec and 1000/hr

/locations/groups/count

2/sec and 1000/hr

/locations/groups/lite

2/sec and 1000/hr

/locations/groups/lite/{id}

2/sec and 1000/hr

/locations/lite

2/sec and 1000/hr

/locations/supportedCountries

5/sec and up to 3000/hour

/networkApplicationGroups

2/sec and 1000/hr

1/sec and 400/hr

/networkApplicationGroups/{groupId}

2/sec and 1000/hr

1/sec and 400/hr

/networkApplicationGroups/lite

2/sec and 1000/hr

/networkApplications

2/sec and 1000/hr

/networkApplications/{appId}

2/sec and 1000/hr

/networkServiceGroups

2/sec and 1000/hr

1/sec and 400/hr

/networkServiceGroups/{serviceGroupId}

2/sec and 1000/hr

1/sec and 400/hr

/networkServiceGroups/lite

2/sec and 1000/hr

/networkServices

2/sec and 1000/hr

1/sec and 400/hr

/networkServices/{serviceId}

2/sec and 1000/hr

1/sec and 400/hr

/networkServices/lite

2/sec and 1000/hr

/nssFeeds

2/sec and 1000/hr

1/sec and 400/hr

/nssFeeds/{feedId}

2/sec and 1000/hr

1/sec and 400/hr

/nssFeeds/feedOutputDefaults

2/sec and 1000/hr

/nssFeeds/testConnectivity/{feedId}

2/sec and 1000/hr

/nssFeeds/validateFeedFormat

1/sec and 400/hr

/orgInformation

2/sec and 1000/hr

/orgInformation/lite

2/sec and 1000/hr

/orgProvisioning/ipGreTunnelInfo

2/sec and 1000/hr

/pacFiles

2/sec and 1000/hr

1/sec and 400/hr

/pacFiles/{pacId}

1/min and 4/hr

/pacFiles/{pacId}/version

2/sec and 1000/hr

/pacFiles/{pacId}/version/{clonedPacVersion}

1/sec and 400/hr

/pacFiles/{pacId}/version/{pacVersion}

2/sec and 1000/hr

/pacFiles/{pacId}/version/{pacVersion}/action/{pacVersionAction}

1/sec and 400/hr

/pacFiles/validate

1/sec and 400/hr

/proxyGateways

2/sec and up to 1000/hr

/proxyGateways/lite

2/sec and up to 1000/hr

/region/byGeoCoordinates

2/sec and up to 1000/hr

/region/byIPAddress/{ip}

2/sec and up to 1000/hr

/region/search

2/sec and up to 1000/hr

/remoteAssistance

2/sec and 1000/hr

1/sec and 400/hr

/ruleLabels

2/sec and 1000/hr

1/sec and 400/hr

/ruleLabels/{ruleLabelId}

2/sec and 1000/hr

1/sec and 400/hr

/sandbox/report/{md5Hash}

2/sec, 1000/hr, 1000/day

/sandbox/report/quota

2/sec and 1000/hr

/sandboxRules

2/sec and 1000/hr

1/sec and 400/hr

/sandboxRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/security

2/sec and 1000/hr

1/sec and 400/hr

/security/advanced

1/sec and 400/hr

/security/advanced/blacklistUrls

1/sec and 400/hr

/shadowIT/applications/{entity}/exportCsv

10/min and up to 40/hr

/shadowIT/applications/export

1/min and up to 4/hr

/sslInspectionRules

2/sec and 1000/hr

1/sec and 400/hr

/sslInspectionRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/sslSettings/certchain

1/sec and 400/hr

/sslSettings/downloadcsr

2/sec and 1000/hr

/sslSettings/generatecsr

1/hr (up to 8 calls per day)

/sslSettings/showcert

2/sec and 1000/hr

/sslSettings/uploadcert/text

1/min and 4/hr

/sslSettings/uploadcertchain/text

1/min and 4/hr

/staticIP

2/sec and 1000/hr

1/sec and 400/hr

/staticIP/{id}

2/sec and 1000/hr

1/sec and 400/hr

/staticIP/validate

1/sec and 400/hr

/status

2/sec and 1000/hr

/status/activate

10/min and 40/hr

/subclouds

1/sec and 400/hr

/subclouds/{id}

1/sec and 400/hr

/subclouds/isLastDcInCountry/{id}

1/sec and 400/hr

/subscriptions

2/sec and 1000/hr

/timeWindows

2/sec and 1000/hr

/timeWindows/lite

2/sec and 1000/hr

/urlCategories

2/sec and 1000/hr

1/sec and 400/hr

/urlCategories/{categoryId}

2/sec and 1000/hr

1/sec and 400/hr

/urlCategories/lite

2/sec and 1000/hr

/urlCategories/review/domains

10/min and 40/hr

/urlCategories/urlQuota

2/sec and 1000/hr

/urlFilteringRules

2/sec and 1000/hr

1/sec and 400/hr

/urlFilteringRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/urlLookup

1/sec and 400/hr
(100 URLs per call)

/users

1/sec and 400/hr

2/sec and 1000/hr

/users/{userId}

2/sec and 1000/hr

1/sec and 400/hr

/users/auditors

2/sec and 1000/hr

/users/bulkDelete

1/min and 4/hr
(500 users per call)

/users/references

2/sec and up to 1000/hr

/vips

2/sec and 1000/hr

/vips/groupByDatacenter

2/sec and 1000/hr

/vips/recommendedList

2/sec and 1000/hr

/vpnCredentials

2/sec and 1000/hr

1/sec and 400/hr

/vpnCredentials/{vpnId}

2/sec and 1000/hr

1/sec and 400/hr

/vpnCredentials/bulkDelete

1/min and 4/hr
(100 VPN credentials per call)

/webApplicationRules/{rule_type}

1/sec and 400/hr

10/min and 40/hr

/webApplicationRules/{rule_type}/{ruleId}

1/sec and 400/hr

10/min and 40/hr

/webApplicationRules/{rule_type}/availableActions

10/min and 40/hr

/webApplicationRules/{rule_type}/duplicate/{ruleId}

10/min and 40/hr

/webApplicationRules/ruleTypeMapping

1/sec and 400/hr

/webDlpRules

2/sec and 1000/hr

1/sec and 400/hr

/webDlpRules/{ruleId}

2/sec and 1000/hr

1/sec and 400/hr

/webDlpRules/lite

2/sec and 1000/hr

/workloadGroups

2/sec and up to 1000/hr

/zpaGateways

2/sec and up to 1000/hr

1/sec and up to 400/hr

/zpaGateways/{gatewayId}

2/sec and up to 1000/hr

1/sec and up to 400/hr

/zscsb/submit

1/sec and 400/hr

to of

Page of

API Rate Limit Summary

Was this article helpful? Click an icon below to submit feedback.