WSO2 · Rate Limits

Wso2 Rate Limits

The WSO2 Publisher / Developer Portal / Admin / Gateway / Service Catalog / DevOps / DCR / Governance APIs are administrative endpoints of the on-prem (Apache 2.0) WSO2 API Manager product. There is no vendor-imposed public rate limit; all throttling is whatever the operator configures inside their own deployment via API Manager throttling policies. WSO2 Choreo and Asgardeo enforce platform-side limits by tier (component count, build/deployment caps, MAU caps, request quotas) but do not publish a per-second numeric ceiling on the management APIs.

Wso2 Rate Limits is the machine-readable rate-limit profile for WSO2 on the APIs.io network, conforming to the API Commons Rate Limits specification.

It captures 3 rate-limit definitions, measuring varies and monthly_active_users.

The profile also includes 4 backoff/retry policies defined.

Tagged areas include Rate Limiting, API Management, and Gateways.

3 Limits
Rate LimitingAPI ManagementGateways

Limits

Operator-configured throttling (on-prem WSO2 API Manager) deployment
varies
configured by API Manager throttling tier policies
WSO2 ships throttling tiers (Bronze / Silver / Gold / Unlimited and custom) that the product operator binds to APIs and applications. The numeric values are the operator's configuration choice rather than a vendor-imposed ceiling.
Choreo platform limits per tier tier
varies
see https://wso2.com/choreo/pricing/
Choreo enforces per-month build, deployment, infrastructure, and API-request caps by pricing tier (Developer / Team / Enterprise). Per-second runtime ceilings on customer APIs depend on the component's resource quota, not a vendor flat rate.
Asgardeo platform limits per tier tier
monthly_active_users
see https://wso2.com/asgardeo/pricing/
Asgardeo's tier ceiling is monthly active users (MAU). Free B2C 7,500 MAU; Free B2B 250 MAU; Free B2E 50 MAU. Authentication-flow throttling is not publicly disclosed.

Policies

Self-hosted throttling
For on-prem WSO2 API Manager, throttling is a product feature - operators define Bronze/Silver/Gold/Unlimited tiers and bind them to APIs via the Publisher / Admin Portal.
Backoff
Standard guidance is exponential backoff with jitter on 429 / 503 responses.
Tier-driven ceilings
For Choreo and Asgardeo SaaS, the published pricing-tier caps act as the effective limits; consumers exceeding them must upgrade or contact sales.
Open-source disclaimer
WSO2 does not publish vendor-imposed rate limits on the open-source API Manager management APIs because there is no vendor control plane in front of them.

Sources