# Limits and errors (/en/docs/developers/vault/limits-and-errors)



Plan vaults and secrets within these limits.

| Limit                                                                                  | Maximum              |
| -------------------------------------------------------------------------------------- | -------------------- |
| Active secrets per vault                                                               | 50                   |
| Secret value size                                                                      | 16384 bytes (16 KiB) |
| Allowed hosts per secret                                                               | 16                   |
| Lines per import                                                                       | 50                   |
| Authorization creation / OAuth validation (per account per minute, counted separately) | 30 / 30              |
| Vault name length                                                                      | 255                  |
| Metadata pairs                                                                         | 16                   |
| Metadata key / value length                                                            | 64 / 512             |
| Items per list page                                                                    | 50 (max 200)         |

An existing secret with the same name returns 409 SECRET\_CONFLICT; writing to an archived vault returns 409 VAULT\_INVALID\_STATE; exceeding the active-secret limit returns 400 VAULT\_LIMIT\_EXCEEDED; a value over 16 KiB returns 413 SECRET\_TOO\_LARGE. Authorization creation and OAuth validation each allow 30 requests per account per fixed one-minute window. Exceeding either quota returns 429 RATE\_LIMITED; wait for the next window. An expired authorization link returns 410 AUTHORIZATION\_EXPIRED; start a new authorization.

Through the Claude Managed Agents vaults API a vault holds at most 20 active credentials, and errors use that API's own error format.

[Error codes and retryability →](/en/docs/api/native/vault/errors)