Humana · Rate Limits

Humana Rate Limits

Humana's developer portal does not publish numeric rate limits for its FHIR APIs. Limits are administered behind the scenes consistent with CMS Patient Access expectations and reasonable-use protections, scoped per registered application and per member token. Production apps that exceed fair-use thresholds are contacted directly. Sandbox endpoints are bound by similar reasonable-use ceilings without published numbers.

4 Limits
Rate LimitingFHIRHealthcareCMS

Limits

Patient Access FHIR requests (production) app + member_token
requests_per_second
not publicly published; reasonable-use enforcement
Member-authorized FHIR queries; throttled to protect platform but no public RPS number.
Provider Directory FHIR requests app
requests_per_second
not publicly published; reasonable-use enforcement
Drug Formulary FHIR requests app
requests_per_second
not publicly published; reasonable-use enforcement
Sandbox FHIR requests ip
requests_per_second
not publicly published; reasonable-use enforcement
Sandbox uses synthetic data; no member PHI risk but limits still apply.

Policies

SMART on FHIR Authorization
Production member data access requires SMART on FHIR / OAuth 2.0 with explicit member consent. Tokens are short-lived and refresh tokens are subject to revocation.
Application Attestation
Developer apps must attest to CMS privacy / data use practices before production access is granted.
Backoff Strategy
Implement exponential backoff and honor any Retry-After response header; pace requests conservatively given the absence of published numeric limits.
Sandbox vs Production
Test against the sandbox at sandbox-fhir.humana.com before promoting to fhir.humana.com. Production apps require completed registration.
Portal Migration
The developers.humana.com portal will be retired; FHIR products and consuming apps will migrate to a successor portal. Watch for migration guidance.

Sources