Auth0 · Rate Limits

Auth0 Rate Limits

Auth0 Rate Limits is the rate-limit profile for Auth0 on the APIs.io network — every limit transcribed verbatim from the provider’s own documentation on 2026-09-20.

It captures 14 rate-limit definitions, including Same user login rate limit — If one IP address makes 20 login attempts in one minute to the same user account, the rate limit comes into effect.; Same user login allowance after limit — After that, Auth0 allows the user 10 attempts per minute.; MFA SMS limit — If you attempt to send more than 10 SMS messages to your device within one hour, you will receive an error message about a rate limit exception..

Tagged areas include Auth0, AI Agents, Authentication, Authorization, and FGA.

14 Limits
Transcribed from the provider's documentation on 2026-09-20 — auth0.com/docs/troubleshoot/customer-support/operational-....
View Source
Auth0AI AgentsAuthenticationAuthorizationFGAIdentity and Access ManagementMCPOktaOpenID ConnectSAMLSecuritySCIMIdentity Federation

Limits

Same user login rate limit ip
If one IP address makes 20 login attempts in one minute to the same user account, the rate limit comes into effect.
database connection login
· per minute
20
Same user login allowance after limit user
After that, Auth0 allows the user 10 attempts per minute.
database connection login
· per minute
10
MFA SMS limit user
If you attempt to send more than 10 SMS messages to your device within one hour, you will receive an error message about a rate limit exception.
MFA SMS
· per hour
10
Enterprise default Authentication API limit accountEnterprise
the default enterprise request limit of 100 RPS
Authentication API
· per second
100
Public Performance Burst multipliers accountEnterprise (Public Performance Burst add-on)burst
three Public Performance Burst modifiers (2x, 3x, and 4x) allowing 200, 300, and 400 RPS, respectively, for the Authentication API for up to 48 hours monthly
Authentication API
· per second
Private Performance Burst 30x/60x accountPrivate Cloud Performance Burstburst
includes a burst (peak) performance capacity up to 30x (3,000 RPS) or 60x (6,000 RPS) for up to 80 hours per month
Authentication API
· per second
30x base capacity accountPrivate Performance Burst 30x
Base capacity: 1,500 RPS for full month
Authentication API
· per second
1500
30x burst capacity accountPrivate Performance Burst 30xburst
Burst/peak capacity: 3,000 RPS for up to 80 hours a month
Authentication API
· per second
3000
Public Cloud concurrency accountPublic Cloud
Public Cloud 250
extensibility
250
Dev Private Cloud concurrency accountDev Private Cloud
Tier Dev Private Cloud 100
extensibility
100
Private Cloud Basic concurrency accountPrivate Cloud Basic
Private Cloud Basic 100 RPS (1x) 200
extensibility
200
Private Cloud 5x concurrency accountPrivate Cloud Performance 5x
Private Cloud Performance 500 RPS (5x) 400
extensibility
400
Private Cloud 15x concurrency accountPrivate Cloud Performance 15x
Private Cloud Performance 1500 RPS (15x) 1200
extensibility
1200
Environment limit example accountPrivate Cloud
With an environment limit of 1500 rps, Tenant 1 at 1400 rps and Tenant 2 at 900 rps (combined 2300 rps) will result in 800 requests being rate limited.
· per second
1500

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/auth0-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.