From a6bfc9f48fcc6cf6bab312160d5f5fe79672d5d3 Mon Sep 17 00:00:00 2001 From: Rafid Rahman Date: Wed, 20 May 2026 16:16:33 -0400 Subject: [PATCH 1/2] feat: add my account api rate limits --- .../enterprise-public.mdx | 20 ++++++++++++++++++ .../essentials-professional-b2b.mdx | 21 +++++++++++++++++++ .../rate-limit-configurations/free-public.mdx | 21 +++++++++++++++++++ .../tier-100-rps-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-10000-rps-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-1500-rps-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-20-development-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-3000-rps-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-500-rps-private-cloud.mdx | 21 +++++++++++++++++++ .../tier-6000-rps-private-cloud.mdx | 21 +++++++++++++++++++ 10 files changed, 209 insertions(+) diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public.mdx index 89945b51b6..506a8bb758 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public.mdx @@ -118,3 +118,23 @@ Rate limits for the endpoints utilized for the Universal Login Authentication Fl | Push notifications sent per user | 5 | 5 | per minute | To a unique User ID | | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + +## My Account API + +Rate limits for the My Account API endpoints in the Enterprise subscription type: + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +|--|--|--|--|--| +| Read Authentication Methods | `GET` | 25 | 25/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 25 | 25/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 100 | 100/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +|--|--|--|--|--| +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/essentials-professional-b2b.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/essentials-professional-b2b.mdx index cd27c874aa..8b9980e2c9 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/essentials-professional-b2b.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/essentials-professional-b2b.mdx @@ -119,5 +119,26 @@ See below for the rate limit policies for the Essentials and Professional pricin | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 10 | 10/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/free-public.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/free-public.mdx index 8958c7c00b..b3d9cf6557 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/free-public.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/free-public.mdx @@ -45,5 +45,26 @@ See below for the rate limit policies for the Free subscription type. | Configure email provider | POST, PATCH, DELETE | `/api/v2/emails/provider` | 5 | 25/minute | Any request | | Read email provider | GET | `/api/v2/emails/provider` | 5 | 25/minute | Any request | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 2 | 2/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 5 | 5/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 2 | 2/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 5 | 5/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-100-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-100-rps-private-cloud.mdx index 83e2d97350..a36a837753 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-100-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-100-rps-private-cloud.mdx @@ -122,5 +122,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 20 | 20/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 20 | 20/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 40 | 40/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-10000-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-10000-rps-private-cloud.mdx index 09d304a401..cc3188adfe 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-10000-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-10000-rps-private-cloud.mdx @@ -100,5 +100,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 2000 | 2000/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2000 | 2000/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 4000 | 4000/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-1500-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-1500-rps-private-cloud.mdx index 6aed120401..4deb880395 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-1500-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-1500-rps-private-cloud.mdx @@ -114,5 +114,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 300 | 300/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 300 | 300/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 600 | 600/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-20-development-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-20-development-private-cloud.mdx index 1077f09940..c16f977a7c 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-20-development-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-20-development-private-cloud.mdx @@ -119,4 +119,25 @@ See below for the rate limit policies for the Tier 20 (Development) Private Clou + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 20 | 20/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 20 | 20/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 40 | 40/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + + + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-3000-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-3000-rps-private-cloud.mdx index 7b04d12861..413d63ff9c 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-3000-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-3000-rps-private-cloud.mdx @@ -115,5 +115,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 600 | 600/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 600 | 600/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 1200 | 1200/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-500-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-500-rps-private-cloud.mdx index 3bc36d11b7..bbb928e747 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-500-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-500-rps-private-cloud.mdx @@ -118,5 +118,26 @@ These limits apply to each tenant you create in the private cloud environment.  | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 100 | 100/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 100 | 100/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 200 | 200/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + diff --git a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-6000-rps-private-cloud.mdx b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-6000-rps-private-cloud.mdx index 0c1a0857fc..765b7d667d 100644 --- a/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-6000-rps-private-cloud.mdx +++ b/main/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/tier-6000-rps-private-cloud.mdx @@ -115,5 +115,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r | SMS sent per user | 10 | 1 | per hour | To a unique User ID | | Email sent per user | 20 | 1 | per minute | To a unique User ID | + + + + + +Tenant Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 1200 | 1200/second | Any request | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 1200 | 1200/second | Any request | +| Read Authentication Methods (filtered) | `GET` | 2400 | 2400/second | Any request | + +User Level: + +| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | +| --- | --- | --- | --- | --- | +| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID | +| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID | +| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID | + From aa58289fa47057df9dbb0ede4447c2f5a6eb1741 Mon Sep 17 00:00:00 2001 From: rafidrahman11 Date: Thu, 21 May 2026 23:39:28 -0400 Subject: [PATCH 2/2] remove rate limits section from My Account API page --- main/docs/manage-users/my-account-api.mdx | 4 ---- 1 file changed, 4 deletions(-) diff --git a/main/docs/manage-users/my-account-api.mdx b/main/docs/manage-users/my-account-api.mdx index 9e7a0832f8..9357a8c964 100644 --- a/main/docs/manage-users/my-account-api.mdx +++ b/main/docs/manage-users/my-account-api.mdx @@ -701,10 +701,6 @@ puts response.read_body -## Rate limits - -During Early Access, the My Account API is limited at a tenant level to 25 requests per second. - ## Cross-Origin Requests If you intend to call the My Account API directly from a browser-based application (like a Single Page Application) running on a different domain than your Auth0 tenant, you will encounter browser security policies known as Cross-Origin Resource Sharing (CORS). By default, browsers block these cross-origin requests.