Free

See below for the rate limit policies for the Free subscription type.

/

API Burst Request Limit Sustained Request Limit
Authentication API 300 300 per minute

Endpoint Method Path Burst Request Limit Sustained Request Limit Limit Type
User Info GET, POST /userinfo 10 5 per/min To a unique user ID
Change Password POST /dbconnections/change_password 10 1 per/min From an IP address to a unique email address
Signup* POST /dbconnections/signup 50 50 per/min From an IP address
Get Passwordless Code or Link GET, POST /passwordless/start 50 50 per/hr From an IP address
Get Token POST /oauth/token 30 30 per/sec Any request
Cross Origin Authentication POST co/authenticate 5 5 per/sec Any request
Authentication POST /usernamepassword/login 5 5 per/sec Any request
JSON Web Token Keys GET /.well-known/jwks.json 20 20 per/sec Any request
Native Social Login POST /oauth/token 50 50 per/min Any Request for Apple or Facebook Native Social Login
*Represents the default limit. You can configure the Signup endpoint limit in Auth0 Dashboard. To learn more, read Suspicious IP Throttling.

/

API Burst Request Limit Sustained Request Limit
Management 2 2/second

Endpoint Method Path Burst Request Limit Sustained Request Limit Limit Type
Register Dynamic Client POST /oidc/register 5 5/second Any request
Verify Custom Domain POST /api/v2/custom-domains{id}/verify 5 5/minute Any request
Read Status Connection POST /api/v2/connections/{id}/status 100 15/second Any request
Rotate Signing Keys POST /api/v2/keys/signing/rotate 5 5/day Any request