# Provenance stamped 2026-10-07 (roadmap#943): written by an API Evangelist sweep (dated 2026-05-04 by the file itself), not
# harvested from the provider. `method: generated` so the economics campaign may replace it with a
# dated, verbatim transcription; every figure below is unverified until it does.
method: generated
generated: '2026-05-04'
specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Palo Alto Networks
providerId: palo-alto-networks
created: '2026-05-04'
modified: '2026-05-05'
reconciled: false
notes: No unified rate-limit document on pan.dev. Limits are per-product and per-deployment
  (e.g. PAN-OS XML/REST API throughput is bounded by appliance capacity; Prisma Cloud and
  SASE have tenant-level API ceilings disclosed in product-specific docs). Specifics require
  product-level access.
tags:
  - Rate Limiting
  - Cybersecurity
  - Network Security
description: Palo Alto Networks does not publish a unified rate-limit policy. Each product
  (PAN-OS, Prisma Cloud, Prisma SASE, Cortex) has its own throughput bound, often customer-deployment
  or tenant specific. Refer to product-specific docs on pan.dev for current limits.
sources:
  - https://pan.dev/
responseCodes:
  throttled: 429
limits:
  - name: PAN-OS REST/XML API
    scope: appliance
    metric: varies
    limit: bounded by appliance capacity and management plane config
    notes: Throughput depends on the firewall model and configured connection limits.
  - name: Prisma Cloud / SASE / Cortex
    scope: tenant
    metric: varies
    limit: see product-specific developer docs at pan.dev
    notes: Each cloud-delivered product publishes its own per-tenant API limits in its developer
      docs.
policies:
  - name: Backoff
    description: Standard exponential backoff with jitter is recommended on any 429 response.
  - name: Per-Product Documentation
    description: Always refer to the specific product's developer documentation on pan.dev
      for the current rate-limit policy.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com