Free
See below for the rate limit policies for the Free subscription type.
Authentication API
Rate limits for the Authentication API on the Free subscription tier.
API | Burst Request Limit | Sustained Request Limit |
---|---|---|
Authentication API | 300 | 300 per minute |
Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type |
---|---|---|---|---|---|
User Info | GET, POST | /userinfo |
10 | 5 per/min | To a unique user ID |
Change Password | POST | /dbconnections/change_password |
10 | 1 per/min | From an IP address to a unique email address |
Signup* | POST | /dbconnections/signup |
50 | 50 per/min | From an IP address |
Get Passwordless Code or Link | GET, POST | /passwordless/start |
50 | 50 per/hr | From an IP address |
Get Token | POST | /oauth/token |
30 | 30 per/sec | Any request |
Cross Origin Authentication | POST | co/authenticate |
5 | 5 per/sec | Any request |
Authentication | POST | /usernamepassword/login |
5 | 5 per/sec | Any request |
JSON Web Token Keys | GET | /.well-known/jwks.json |
20 | 20 per/sec | Any request |
Native Social Login | POST | /oauth/token |
50 | 50 per/min | Any Request for Apple or Facebook Native Social Login |
Management API
Rate limits for the Management API on the Free subscription tier.
API | Burst Request Limit | Sustained Request Limit |
---|---|---|
Management | 2 | 2/second |
Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type |
---|---|---|---|---|---|
Register Dynamic Client | POST | /oidc/register |
5 | 5/second | Any request |
Verify Custom Domain | POST | /api/v2/custom-domains{id}/verify |
5 | 5/minute | Any request |
Read Status Connection | POST | /api/v2/connections/{id}/status |
100 | 15/second | Any request |
Rotate Signing Keys | POST | /api/v2/keys/signing/rotate |
5 | 5/day | Any request |