Private Cloud Performance 3000 RPS (30x) and 3000 RPS (30x) Burst

See below for the rate limits in the Private Cloud Performance 3000 RPS (30x) and 3000 RPS (30x) Burst subscription types. These limits apply to each tenant you create in the private cloud environment. 

Therefore, we recommend deploying one tenant per private cloud environment for risk mitigation.

/

API Burst Request Limit Sustained Request Limit Peak Request Limit
Authentication API 3000 3000/second N/A
Authentication API (30x Burst) 1500 1500/second 3000 Burst; 3000/second sustained

Endpoint Method Burst Request Limit Sustained Request Limit Limit Type
User Info GET, POST 10 5/minute To a unique User ID
Change Password

Reset Password with Universal Login
POST 10 1/minute From an IP Address to a unique Email Address
Signup* POST 50 50/minute From an IP Address
Get Passwordless Code or Link GET, POST 50 50/hour From an IP Address
Native Social Login (Apple / Facebook Only) POST 50 500/minute Any Request for Apple or Facebook Native Social Login
*Represents the default limit. You can configure the Signup endpoint limit in Auth0 Dashboard. To learn more, read Suspicious IP Throttling.

/

API Burst Request Limit Sustained Request Limit
Management API 1500 1500/second

Endpoint Method Burst Request Limit Sustained Request Limit Limit Type
Get Organizations GET 300 3000/minute Any request
Get Organizations by ID GET 1200 15000/minute Any request
Get Organizations by Name GET 600 6000/minute Any request
Create an Organization POST, PATCH, DELETE 150 4500/minute Any request
Get Organization Members GET 1200 15000/minute Any request
Add Organization Members POST, DELETE 600 6000/minute Any request
Get Members of an Organization GET 600 6000/minute Any request
Get Organization Member Roles GET 600 6000/minute Any request
Create Organization Member Roles POST, DELETE 600 6000/minute Any request
Get Organization Connections GET 300 3000/minute Any request
Create Organization Connections POST, PATCH, DELETE 150 4500/minute Any request
Verify Custom Domain POST 5 5/minute Any request
Get Status Connection POST 100 15/second Any request
Rotate Signing Keys POST 5 5/day Any request
Get Partials for a Prompt GET 5 5/minute Any request
Create Partials for a Prompt PUT 5 5/minute Any request
Get sessions for a User GET 1500 1500/second Any request
Get refresh tokens for a User GET 1500 1500/second Any request
Get a session GET 1500 1500/second Any request
Get a refresh token GET 750 750/second Any request
Delete User Sessions DELETE 750 750/second Any request
Delete User Refresh Tokens DELETE 750 750/second Any request
Delete Session DELETE 750 750/second Any request
Delete Refresh Token DELETE 750 750/second Any request
Get Clients


Only applies to the usage of the q parameter.

GET 150 4500/minute Any request
Get Organization Client Grants GET 300 3000/minute Any request
Create Organization Client Grants POST 150 4500/minute Any request

/

Limit Type Endpoint Path Operation Limit
Single SCIM connection endpoint /scim/v2/connections/{connection-id} Any request 25 requests per second
Global tenant limit for all SCIM connections /scim/v2/connections/* Any request 1500 requests per second