API restrictions and limits

The standard API call limits are listed in this table. Note that these are not hard limits; Medallia limits the number of API calls per company to prevent unintended bugs in API client code or malicious code from taking down production systems.


API	Requests per second	Requests per minute	Requests per day	Concurrent requests	Timeout (in seconds)
Query API	70	N/A	975,000	N/A	90
MQL API	70	N/A	50,000	N/A	180
Speech API	N/A	13,000	325,000	1,000	180
Users API	70	N/A	10,000	N/A	180
Roles API	70	N/A	10,000	N/A	180
Import API: Import on concurrent processing mode	1	N/A	1,950,000	5	600
Import API: Import on non-concurrent processing mode	10	N/A	1,950,000	N/A	600
Feed File API: Results	10	N/A	100,000	N/A	600
Feed File API: Detailed results	10	N/A	10,000	N/A	600
Introspection API: All import endpoints	10	N/A	10,000	N/A	600
Introspection API: Specific import endpoint	10	N/A	10,000	N/A	600

When these limits are exceeded, the app or user may be throttled. API requests made by a throttled user or app will fail.

API-specific limits

The table above is not comprehensive of every API limit. Some APIs have limits that only apply to that particular API due to the unique use case it supports. Those API-specific limits are called out below.

Query API calls have a cost. Requests are subject to cost limits and are throttled once the 3,000,000 cost-units-per-query limit is reached.
MQL API — for this API, query bundling allows you to string multiple queries in one API call, and there can be, at most, 32 bundled queries per request.
Import API (also known as Web Feeds) — for concurrent feeds the data payload size limit is 100 MB, for non-concurrent feeds it is 1.5 GB.
Feed file API — detailed results show up to the first 5,000 input records per result status for an import request. Examples of result status include records successfully created, updated, or discarded.

GovCloud

Medallia APIs are available on GovCloud instances and have the same rate-limiting functionality as other medallia instances and data centers.

Restriction: GovCloud instances using Medallia's GovCloud Trusted Internet Connection (TIC) premium offering also support Medallia APIs, but must implement an API gateway mechanism for rate limiting. Contact your Medallia expert to implement Medallia's GovCloud Trusted Internet Connection (TIC) premium offering.

API HTTP response headers

Experience Cloud APIs will return these HTTP headers which can be used to track rate limits. For more details see IETF draft-polli-ratelimit-headers.


Parameter	Description	Sample values
X-RateLimit-Limit	Request quota associated with the client in the current time window (in seconds).	10, 10;w=1, 100;w=86400
X-RateLimit-Remaining	Remaining quota units associated with the client during the current time window.	60
X-RateLimit-Reset	Time remaining in the current window, specified in seconds, until the quota resets.	10

Restriction: These rate-limit headers are not meant to support authorization or other kinds of access control.