specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Cardinal Health
providerId: cardinal-health
created: '2026-05-04'
modified: '2026-09-05'
generated: '2026-09-05'
method: searched
source: >-
  Web search for Cardinal Health API rate limits or throttling policy, plus direct
  probes of api.cardinalhealth.com. No published limits, no documented response
  headers, no documented exhaustion status code.
limit_count: 0
limits: []
headers: {}
responseCodes: {}
tags:
  - B2B
  - Distribution
  - EDI
  - Healthcare
  - Supply Chain
  - Trading Partner
description: >-
  Cardinal Health documents no rate limits. There is no public API reference to
  document them in: the only reachable Cardinal Health API host answers 403 VPC
  Service Controls to every anonymous request, and no rate-limit response headers
  could be observed. An honest zero.
note: >-
  THIS FILE REPLACES A SCAFFOLD. The prior version (2026-05-04 bulk sweep, method:
  generated) asserted five tiered limits — 10 rpm free, 100 rpm professional, 1,000
  rpm enterprise, with X-RateLimit-* headers and a 429 — none of which Cardinal Health
  publishes or was ever observed. Those invented numbers were being read as provider
  data. A searched zero replaces them.
evidence:
  - url: https://api.cardinalhealth.com/v1
    http_status: 403
    fetched: '2026-09-05'
    note: >-
      403 SecurityPolicyViolated with no RateLimit-*, X-RateLimit-* or Retry-After
      header in the response
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com