Limits and errors
Capacity limits and error handling.
Plan vaults and secrets within these limits.
| Limit | Maximum |
|---|---|
| Active secrets per vault | 50 |
| Secret value size | 16384 bytes (16 KiB) |
| Allowed hosts per secret | 16 |
| Lines per import | 50 |
| Authorization creation / OAuth validation (per account per minute, counted separately) | 30 / 30 |
| Vault name length | 255 |
| Metadata pairs | 16 |
| Metadata key / value length | 64 / 512 |
| Items per list page | 50 (max 200) |
An existing secret with the same name returns 409 SECRET_CONFLICT; writing to an archived vault returns 409 VAULT_INVALID_STATE; exceeding the active-secret limit returns 400 VAULT_LIMIT_EXCEEDED; a value over 16 KiB returns 413 SECRET_TOO_LARGE. Authorization creation and OAuth validation each allow 30 requests per account per fixed one-minute window. Exceeding either quota returns 429 RATE_LIMITED; wait for the next window. An expired authorization link returns 410 AUTHORIZATION_EXPIRED; start a new authorization.
Through the Claude Managed Agents vaults API a vault holds at most 20 active credentials, and errors use that API's own error format.