WSO2 · Rate Limits

Wso2 Rate Limits

The WSO2 Publisher / Developer Portal / Admin / Gateway / Service Catalog / DevOps / DCR / Governance APIs are administrative endpoints of the on-prem (Apache 2.0) WSO2 API Manager product. There is no vendor-imposed public rate limit; all throttling is whatever the operator configures inside their own deployment via API Manager throttling policies. WSO2 Choreo and Asgardeo enforce platform-side limits by tier (component count, build/deployment caps, MAU caps, request quotas) but do not publish a per-second numeric ceiling on the management APIs.

Wso2 Rate Limits is the machine-readable rate-limit profile for WSO2 on the APIs.io network, conforming to the API Commons Rate Limits specification.

It captures 3 rate-limit definitions, measuring varies and monthly_active_users.

The profile also includes 4 backoff/retry policies defined.

Tagged areas include Rate Limiting, API Management, and Gateways.

3 Limits
Rate LimitingAPI ManagementGateways

Limits

Operator-configured throttling (on-prem WSO2 API Manager) deployment
varies
configured by API Manager throttling tier policies
WSO2 ships throttling tiers (Bronze / Silver / Gold / Unlimited and custom) that the product operator binds to APIs and applications. The numeric values are the operator's configuration choice rather than a vendor-imposed ceiling.
Choreo platform limits per tier tier
varies
see https://wso2.com/choreo/pricing/
Choreo enforces per-month build, deployment, infrastructure, and API-request caps by pricing tier (Developer / Team / Enterprise). Per-second runtime ceilings on customer APIs depend on the component's resource quota, not a vendor flat rate.
Asgardeo platform limits per tier tier
monthly_active_users
see https://wso2.com/asgardeo/pricing/
Asgardeo's tier ceiling is monthly active users (MAU). Free B2C 7,500 MAU; Free B2B 250 MAU; Free B2E 50 MAU. Authentication-flow throttling is not publicly disclosed.

Policies

Self-hosted throttling
For on-prem WSO2 API Manager, throttling is a product feature - operators define Bronze/Silver/Gold/Unlimited tiers and bind them to APIs via the Publisher / Admin Portal.
Backoff
Standard guidance is exponential backoff with jitter on 429 / 503 responses.
Tier-driven ceilings
For Choreo and Asgardeo SaaS, the published pricing-tier caps act as the effective limits; consumers exceeding them must upgrade or contact sales.
Open-source disclaimer
WSO2 does not publish vendor-imposed rate limits on the open-source API Manager management APIs because there is no vendor control plane in front of them.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/wso2-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.