Skip to content

feat: add my account api rate limits [EMBL-1005] #1245

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
avanscoy merged 2 commits into from
May 22, 2026
Merged

feat: add my account api rate limits [EMBL-1005] #1245

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a6bfc9f
feat: add my account api rate limits
rafidrahman11 May 20, 2026
aa58289
remove rate limits section from My Account API page
rafidrahman11 May 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 0 additions & 4 deletions main/docs/manage-users/my-account-api.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -701,10 +701,6 @@ puts response.read_body
</AuthCodeGroup>


## Rate limits

During Early Access, the My Account API is limited at a tenant level to 25 requests per second.

## Cross-Origin Requests

If you intend to call the My Account API directly from a browser-based application (like a Single Page Application) running on a different domain than your Auth0 tenant, you will encounter browser security policies known as Cross-Origin Resource Sharing (CORS). By default, browsers block these cross-origin requests.
Expand Down
20 changes: 20 additions & 0 deletions ...onal-policies/rate-limit-policy/rate-limit-configurations/enterprise-public.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,3 +118,23 @@ Rate limits for the endpoints utilized for the Universal Login Authentication Fl
| Push notifications sent per user | 5 | 5 | per minute | To a unique User ID |
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

## My Account API

Rate limits for the My Account API endpoints in the Enterprise subscription type:

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
|--|--|--|--|--|
| Read Authentication Methods | `GET` | 25 | 25/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 25 | 25/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 100 | 100/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
|--|--|--|--|--|
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |
21 changes: 21 additions & 0 deletions ...ies/rate-limit-policy/rate-limit-configurations/essentials-professional-b2b.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,5 +119,26 @@ See below for the rate limit policies for the Essentials and Professional pricin
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Essentials and Professional pricing plans.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 10 | 10/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...perational-policies/rate-limit-policy/rate-limit-configurations/free-public.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,5 +45,26 @@ See below for the rate limit policies for the Free subscription type.
| Configure email provider | POST, PATCH, DELETE | `/api/v2/emails/provider` | 5 | 25/minute | Any request |
| Read email provider | GET | `/api/v2/emails/provider` | 5 | 25/minute | Any request |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Free subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 2 | 2/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 5 | 5/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 2 | 2/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 5 | 5/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...cies/rate-limit-policy/rate-limit-configurations/tier-100-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,5 +122,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Basic 100 RPS (1x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 20 | 20/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 20 | 20/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 40 | 40/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...es/rate-limit-policy/rate-limit-configurations/tier-10000-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,5 +100,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 10,000 RPS (100x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 2000 | 2000/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2000 | 2000/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 4000 | 4000/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...ies/rate-limit-policy/rate-limit-configurations/tier-1500-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -114,5 +114,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 1500 RPS (15x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 300 | 300/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 300 | 300/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 600 | 600/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...te-limit-policy/rate-limit-configurations/tier-20-development-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,4 +119,25 @@ See below for the rate limit policies for the Tier 20 (Development) Private Clou

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Tier Dev Private Cloud subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 20 | 20/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 20 | 20/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 40 | 40/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>

</AccordionGroup>
21 changes: 21 additions & 0 deletions ...ies/rate-limit-policy/rate-limit-configurations/tier-3000-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,5 +115,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 3000 RPS (30x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 600 | 600/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 600 | 600/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 1200 | 1200/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...cies/rate-limit-policy/rate-limit-configurations/tier-500-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,5 +118,26 @@ These limits apply to each tenant you create in the private cloud environment. 
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 500 RPS (5x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 100 | 100/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 100 | 100/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 200 | 200/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>
21 changes: 21 additions & 0 deletions ...ies/rate-limit-policy/rate-limit-configurations/tier-6000-rps-private-cloud.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,5 +115,26 @@ Therefore, we recommend deploying one tenant per private cloud environment for r
| SMS sent per user | 10 | 1 | per hour | To a unique User ID |
| Email sent per user | 20 | 1 | per minute | To a unique User ID |

</Accordion>


<Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 6000 RPS (60x) subscription type.">

Tenant Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 1200 | 1200/second | Any request |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 1200 | 1200/second | Any request |
| Read Authentication Methods (filtered) | `GET` | 2400 | 2400/second | Any request |

User Level:

| Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
| --- | --- | --- | --- | --- |
| Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
| Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
| Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |

</Accordion>
</AccordionGroup>