specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Synopsys
providerId: synopsys
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Software Security
  - Application Security
  - EDA
  - Rate Limiting
description: Synopsys does not publish standardized per-second/per-minute rate-limit numbers for the Polaris, Coverity, Seeker, or Cloud OpenLink APIs. Coverity is typically self-hosted (Coverity Connect server) so throttling depends on the customer's deployment; cloud-managed Polaris and Synopsys Cloud apply internal limits, but the thresholds are not public.
sources:
  - https://polaris.synopsys.com/developer/default/documentation
  - https://documentation.blackduck.com/bundle/coverity-docs/page/cim-api-docs/openapi/cim-openapi.html
  - https://www.synopsys.com/cloud/openlink/api.html
notes: No published numerical rate limits across the Synopsys API portfolio. Self-hosted Coverity Connect throttling depends on the customer's deployment; cloud-managed limits are tenant-provisioned.
responseCodes:
  throttled: 429
limits:
  - name: Self-Hosted Throttling (Coverity Connect)
    scope: deployment
    metric: varies
    limit: 'governed by customer Coverity Connect deployment - not centrally published'
  - name: Cloud-Managed Throttling (Polaris, Synopsys Cloud)
    scope: tenant
    metric: varies
    limit: 'tenant-provisioned; not publicly documented'
  - name: OpenLink Vendor Throttling
    scope: tenant
    metric: varies
    limit: 'see Synopsys Cloud OpenLink documentation; thresholds tenant-specific'
policies:
  - name: OAuth 2.0 / API Key
    description: Polaris uses API tokens; Coverity uses authenticated user/service-account credentials; Synopsys Cloud OpenLink supports API key and OAuth2.
  - name: Reference Vendor Documentation
    description: Specific limits, retry guidance, and deprecation notices are kept in product-specific Synopsys / Black Duck documentation rather than a single rate-limit reference.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com