Free
See below for the rate limit policies for the Free subscription type.
*Represents the default limit. You can configure the Signup endpoint limit in Auth0 Dashboard. To learn more, read Suspicious IP Throttling.
Authentication API: Rate limits for the Authentication API and API endpoints in the Free subscription type.
Authentication API: Rate limits for the Authentication API and API endpoints in the Free subscription type.
| API | Burst Request Limit | Sustained Request Limit |
|---|---|---|
| Authentication API | 300 | 300/minute |
| Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type |
|---|---|---|---|---|---|
| User Info | GET, POST | /userinfo | 10 | 5 per/min | To a unique user ID |
| Change Password | POST | /dbconnections/change_password & u/reset-password/request/:connection | 10 | 1 per/min | From an IP address to a unique email address |
| Get Passwordless Code or Link | GET, POST | /passwordless/start | 50 | 50 per/hr | From an IP address |
| Get Token | POST | /oauth/token | 30 | 30 per/sec | Any request |
| Cross Origin Authentication | POST | co/authenticate | 5 | 5 per/sec | Any request |
| Authentication | POST | /usernamepassword/login | 5 | 5 per/sec | Any request |
| JSON Web Token Keys | GET | /.well-known/jwks.json | 20 | 20 per/sec | Any request |
| Native Social Login | POST | /oauth/token | 50 | 50 per/min | Any Request for Apple or Facebook Native Social Login |
| Dynamic Application (Client) Registration | POST | /oidc/register | 5 | 5 per/sec | Any request |
Management API: Rate limits for the Management API on the Free subscription tier.
Management API: Rate limits for the Management API on the Free subscription tier.
| API | Burst Request Limit | Sustained Request Limit |
|---|---|---|
| Management | 2 | 2/second |
| Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type |
|---|---|---|---|---|---|
| Register Dynamic Client | POST | /oidc/register | 5 | 5/second | Any request |
| Verify Custom Domain | POST | /api/v2/custom-domains/verify | 5 | 5/minute | Any request |
| Read Status Connection | POST | /api/v2/connections//status | 100 | 15/second | Any request |
| Rotate Signing Keys | POST | /api/v2/keys/signing/rotate | 5 | 5/day | Any request |
| Configure email templates | POST, PATCH, DELETE | /api/v2/email-templates | 5 | 25/minute | Any request |
| Read email templates | GET | /api/v2/email-templates | 10 | 50/minute | Any request |
| Configure email provider | POST, PATCH, DELETE | /api/v2/emails/provider | 5 | 25/minute | Any request |
| Read email provider | GET | /api/v2/emails/provider | 5 | 25/minute | Any request |