WorkOS · Rate Limits
Workos Rate Limits
Workos Rate Limits is the rate-limit profile for WorkOS on the APIs.io network — every limit transcribed verbatim from the provider’s own documentation on 2026-09-20.
It captures 15 rate-limit definitions, including All requests — 6,000 requests per 60 seconds per API key; Get Authorization URL — 1,000 requests per 60 seconds per connection; Directory Users — 4 requests per second per directory.
Limit state is signalled in the Retry-After response header, and an exhausted limit returns HTTP 429.
Tagged areas include Authentication, Identity Provider, SSO, SAML, and OpenID Connect.
15 Limits
Exhausted: HTTP 429
Retry-After
Transcribed from the provider's documentation on 2026-09-20 — workos.com/docs/reference/rate-limits.
View Source
AuthenticationIdentity ProviderSSOSAMLOpenID ConnectSCIMDirectory SyncAuthorizationFGAAudit LogsMFAB2B SaaSAgentsMCPIdentity Federation
Limits
All requests api-key
6,000 requests per 60 seconds per API key
6000
Get Authorization URL unclear
1,000 requests per 60 seconds per connection
1000
Directory Users unclear
4 requests per second per directory
4
Delete Organization api-key
50 requests per 60 seconds per API key
50
Create Event api-key
6,000 requests per 60 seconds per API key
6000
AuthKit Reads unclear
1,000 requests per 10 seconds
1000
AuthKit Writes unclear
500 requests per 10 seconds
500
Authentication user
10 requests per 60 seconds per email or challenge ID
10
Magic Auth user
3 requests per 60 seconds per email
3
Email verification user
3 requests per 60 seconds per user
3
Password reset user
3 requests per 60 seconds per email
3
Hosted AuthKit SSO sign-ins ip
3 requests per 60 seconds per IP address
3
Hosted AuthKit Email sign-ins ip
10 requests per 60 seconds per email and IP address
10
Magic Auth sign-ins ip
10 requests per 60 seconds per IP address and challenge ID
10
Magic Auth code requests ip
3 requests per 60 seconds per IP address and email
3
Sources
Work with this as data
Every rate limit here is available over the APIs.io API and to AI agents over MCP.