GitLab · Rate Limits

Gitlab Rate Limits

Gitlab Rate Limits is the rate-limit profile for GitLab on the APIs.io network — every limit transcribed verbatim from the provider’s own documentation on 2026-11-05.

It captures 67 rate-limit definitions, including Protected paths for an IP address — 10 requests each minute; Sign-in attempts (POST /users/sign_in) for an IP address — 10 requests every 5 minutes; Raw endpoint traffic for a project, commit, or file path — 300 requests each minute.

Tagged areas include Code, Developer Tools, Platform, Software Development, and Version Control.

67 Limits
Transcribed from the provider's documentation on 2026-11-05 — docs.gitlab.com/user/gitlab_com/rate_limits/.
View Source
CodeDeveloper ToolsPlatformSoftware DevelopmentVersion ControlGitLab

Limits

Protected paths for an IP address ip
10 requests each minute
· per minute
10
Sign-in attempts (POST /users/sign_in) for an IP address ip
10 requests every 5 minutes
POST /users/sign_in
· per 5 minutes
10
Raw endpoint traffic for a project, commit, or file path project
300 requests each minute
· per minute
300
Unauthenticated raw endpoint traffic for a project project
800 requests each minute
· per minute
800
Unauthenticated traffic from an IP address ip
500 requests each minute
· per minute
500
Authenticated API traffic for a user user
2,000 requests each minute
· per minute
2000
Authenticated non-API HTTP traffic for a user user
1,000 requests each minute
· per minute
1000
Authenticated Git HTTPS traffic for a user user
10,000 requests each minute
· per minute
10000
Unauthenticated Git HTTPS traffic from an IP address ip
15,000 requests each minute
· per minute
15000
Git SSH operations for a user, project, and Git command user
600 operations each minute
· per minute
600
All traffic from an IP address ip
2,000 requests each minute
· per minute
2000
Issue creation unclear
200 requests each minute
· per minute
200
Project creation (POST /api/v4/projects and UI) for a user user
200 requests each day
POST /api/v4/projects
· per day
200
Group creation (POST /api/v4/groups and UI) for a user user
200 requests each day
POST /api/v4/groups
· per day
200
Note creation on issues and merge requests unclear
60 requests each minute
· per minute
60
Advanced, project, or group search API for an IP address ip
100 requests each minute
· per minute
100
Advanced, project, or group search API for a user user
100 requests each minute
· per minute
100
GitLab Pages requests for an IP address ip
1,000 requests every 50 seconds
· per 50 seconds
1000
GitLab Pages requests for a GitLab Pages domain unclear
5,000 requests every 10 seconds
· per 10 seconds
5000
GitLab Pages TLS connections for an IP address ip
1,000 requests every 50 seconds
· per 50 seconds
1000
GitLab Pages TLS connections for a GitLab Pages domain unclear
400 requests every 10 seconds
· per 10 seconds
400
Pipeline creation requests for a project, user, or commit project
25 requests each minute
· per minute
25
Pipeline creation requests for a user user
2,000 requests each minute
· per minute
2000
CI Lint requests for a user user
400 requests each minute
· per minute
400
Alert integration endpoint requests for a project project
3,600 requests every hour
· per hour
3600
GitLab Duo aiAction requests unclear
160 requests every 8 hours
· per 8 hours
160
API requests from a user to /api/v4/users/:id unclear
300 requests every 10 minutes
· per 10 minutes
300
GitLab package hosting system requests for an IP address ip
1,000 requests each minute
· per minute
1000
Virtual registry requests for an IP address and top-level group ip+top-level-group
4,000 requests every 15 seconds
· per 15 seconds
4000
Rejected virtual registry package requests for an IP address ip
4,000 requests every 15 seconds
· per 15 seconds
4000
Repository files API requests (GET /api/v4/projects/:id/repository/files/*) for an IP address and file path ip
500 requests each minute
GET /api/v4/projects/:id/repository/files/*
· per minute
500
User followers requests (/api/v4/users/:id/followers) unclear
100 requests each minute
/api/v4/users/:id/followers
· per minute
100
User following requests (/api/v4/users/:id/following) unclear
100 requests each minute
/api/v4/users/:id/following
· per minute
100
User status requests (/api/v4/users/:user_id/status) unclear
240 requests each minute
/api/v4/users/:user_id/status
· per minute
240
User SSH keys requests (/api/v4/users/:user_id/keys) unclear
120 requests each minute
/api/v4/users/:user_id/keys
· per minute
120
Single SSH key requests (/api/v4/users/:id/keys/:key_id) unclear
120 requests each minute
/api/v4/users/:id/keys/:key_id
· per minute
120
User GPG keys requests (/api/v4/users/:id/gpg_keys) unclear
120 requests each minute
/api/v4/users/:id/gpg_keys
· per minute
120
Single GPG key requests (/api/v4/users/:id/gpg_keys/:key_id) unclear
120 requests each minute
/api/v4/users/:id/gpg_keys/:key_id
· per minute
120
User projects requests (/api/v4/users/:user_id/projects) project
300 requests each minute
/api/v4/users/:user_id/projects
· per minute
300
User contributed projects requests (/api/v4/users/:user_id/contributed_projects) project
100 requests each minute
/api/v4/users/:user_id/contributed_projects
· per minute
100
User starred projects requests (/api/v4/users/:user_id/starred_projects) project
100 requests each minute
/api/v4/users/:user_id/starred_projects
· per minute
100
Projects list requests (/api/v4/projects) project
2,000 requests every 10 minutes
/api/v4/projects
· per 10 minutes
2000
Unauthenticated projects list requests (/api/v4/projects) from an IP address ip
400 requests every 10 minutes
/api/v4/projects
· per 10 minutes
400
Group projects requests (/api/v4/groups/:id/projects) project
600 requests each minute
/api/v4/groups/:id/projects
· per minute
600
Single project requests (/api/v4/projects/:id) project
400 requests each minute
/api/v4/projects/:id
· per minute
400
Groups list requests (/api/v4/groups) unclear
50 requests each minute
/api/v4/groups
· per minute
50
Single group requests (/api/v4/groups/:id) unclear
400 requests each minute
/api/v4/groups/:id
· per minute
400
Runner jobs requests using a runner token (/api/v4/jobs/request) unclear
2,000 requests each minute
/api/v4/jobs/request
· per minute
2000
Runner jobs requests using a runner token from an IP address (/api/v4/jobs/request) ip
2,400 requests each minute
/api/v4/jobs/request
· per minute
2400
Runner job trace patch requests using a job token (/api/v4/jobs/trace) unclear
200 requests each minute
/api/v4/jobs/trace
· per minute
200
Runner jobs requests using a job token (/api/v4/jobs/*) unclear
200 requests each minute
/api/v4/jobs/*
· per minute
200
List all project members in a project project
200 requests each minute
· per minute
200
Virtual registry: Request passes access checks IP address and top-level group
4,000 requests every 15 seconds
· per 15 seconds
4000
Virtual registry: Request fails access checks IP address
4,000 requests every 15 seconds
· per 15 seconds
4000
Authenticated traffic for a user (sustained, Free) userFree
5,000 each hour
· per hour
5000
Authenticated traffic for a user (sustained, Premium) userPremium
15,000 each hour
· per hour
15000
Authenticated traffic for a user (sustained, Ultimate) userUltimate
25,000 each hour
· per hour
25000
Traffic for a top-level group (sustained, Free) top-level-groupFree
5,000 each hour
· per hour
5000
Unauthenticated traffic from an IP address (sustained, Free) ipFree
60 each hour
· per hour
60
Unauthenticated traffic from an IP address (sustained, Premium) ipPremium
60 each hour
· per hour
60
Unauthenticated traffic from an IP address (sustained, Ultimate) ipUltimate
60 each hour
· per hour
60
Authenticated traffic for a user (burst, Free) userFreeburst
100 each minute, 300 for web traffic
Authenticated traffic for a user (burst, Premium) userPremiumburst
1,250 each minute
· per minute
1250
Authenticated traffic for a user (burst, Ultimate) userUltimateburst
2,000 each minute
· per minute
2000
Traffic for a top-level group (burst, Free) top-level-groupFreeburst
400 each minute
· per minute
400
Traffic for a top-level group (burst, Premium) top-level-groupPremiumburst
5,000 each minute
· per minute
5000
Traffic for a top-level group (burst, Ultimate) top-level-groupUltimateburst
10,000 each minute
· per minute
10000

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/gitlab-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.