Corbado · Rate Limits

Corbado Rate Limits

Corbado does not publish explicit numeric rate limits for the Backend API. As a multi-tenant authentication platform, requests are scoped per project and authenticated with HTTP Basic auth (project ID + API secret); abusive or excessive traffic is throttled and clients should expect HTTP 429 responses under load. Plan and usage are primarily metered by monthly active users (MAU) rather than raw request rate. Specific per-endpoint limits are not reconciled in this artifact.

Corbado Rate Limits is the machine-readable rate-limit profile for Corbado on the APIs.io network, conforming to the API Commons Rate Limits specification.

It captures 3 rate-limit definitions, measuring requests and monthly_active_users.

The profile also includes 2 backoff/retry policies defined and response codes documented for throttled.

Tagged areas include Authentication, Passkeys, WebAuthn, Passwordless, and CIAM.

3 Limits Throttle: 429
AuthenticationPasskeysWebAuthnPasswordlessCIAMIdentityRate LimitingQuotasThrottling

Limits

Backend API Requests project
requests
see provider documentation
Per-project request throttling; explicit numeric ceiling not published.
Passkey Ceremonies project
requests
see provider documentation
Append/login start and finish ceremonies; throttled to mitigate abuse.
Monthly Active Users (MAU) project
monthly_active_users
plan-dependent
Primary metering dimension; tied to plan allotment, not a request rate.

Policies

Per-Project Scoping
Limits and usage are scoped to a project identified by the project ID used in Basic auth.
Backoff Strategy
Clients should implement exponential backoff with jitter and honor Retry-After on HTTP 429.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/corbado-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.