> ## Documentation Index
> Fetch the complete documentation index at: https://docs-staging-chore-teams-api-autoupdate.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Tier 10000 RPS Private Cloud rate limits

# Private Cloud Performance 10,000 RPS (100x)

<Callout icon="file-lines" color="#0EA5E9" iconType="regular">
  Total sustained throughput to both the Authentication API and MyAccount API in an environment is generally supported up to 500 RPS; however, certain unique workloads, heavy combined usage of Authentication and Management APIs, or certain Auth Flows like ROPG to the Authentication API, may cause degraded performance at lower RPS.
</Callout>

See below for the rate limits in the Private Cloud Performance 10,000 RPS (100x) subscription type.

Therefore, we recommend deploying one tenant per private cloud environment for risk mitigation.

<AccordionGroup>
  <Accordion title="Authentication API: Rate limits for the Authentication API and API endpoints in the Private Cloud Performance 10000 RPS subscription type.">
    | [API](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#api-rate-limits) | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Peak Request Limit |
    | - | - | - | - |
    | Authentication API | 10,000 | 10,000/second | N/A |

    | [Endpoint](https://auth0.com/docs/api/authentication#introduction) | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
    | - | - | - | - | - |
    | [User Info](https://auth0.com/docs/api/authentication#get-user-info) | `GET`, `POST` | 10 | 5/minute | To a unique User ID |
    | [Change Password](https://auth0.com/docs/api/authentication#change-password)<br /><br />[Reset Password with Universal Login](/docs/authenticate/database-connections/password-change#universal-login-page) | `POST` | 10 | 1/minute | From an IP Address to a unique Email Address |
    | [Get Passwordless Code or Link](https://auth0.com/docs/api/authentication#passwordless) | `GET`, `POST` | 50 | 50/hour | From an IP Address |
    | [Native Social Login (Apple / Facebook Only)](https://auth0.com/docs/api/authentication#verify-with-one-time-password-otp-) | `POST` | 50 | 500/minute | Any Request for Apple or Facebook Native Social Login |
    | [Dynamic Application (Client) Registration](https://auth0.com/docs/api/authentication#dynamic-application-client-registration) | `POST` | 5 | 5/second | Any request |
    | [Universal Logout](https://auth0.com/docs/api/authentication#global-token-revocation) | `POST` | 2500 | 2500/second | Any request |
    | Pushed Authorization Requests (PAR) | `POST` | 100 | 100/second | From an IP Address |
    | Back-Channel authorize (CIBA) | `POST` | 500 | 500/minute | From an IP Address |
    | Device code activation (no prompt) | `POST` | 30 | 6/second | From an IP Address |
    | Device code authorization | `POST` | 5 | 5/second | From an IP Address |
    | MFA OOB token exchange | `POST` | 12 | 12/minute | To a unique session |
    | [Custom Token Exchange](/docs/authenticate/custom-token-exchange) | `POST` | 1500 | 1500/second | Any request |
    | Token Vault ([Connected Accounts](/docs/secure/call-apis-on-users-behalf/token-vault) and [token exchange](/docs/secure/call-apis-on-users-behalf/token-vault#supported-token-exchanges) | `POST` | 700 | 700/second | Any request |
    | [On-Behalf-Of Token Exchange](/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange) | `POST` | 3000 | 3000/second | Any Request |

    \*Represents the default limit. You can configure the Signup endpoint limit in Auth0 Dashboard. To learn more, read [Suspicious IP Throttling](/docs/secure/attack-protection/suspicious-ip-throttling).
  </Accordion>

  <Accordion title="Management API: Rate limits for the Management API, API endpoints, and API endpoint groups in the Private Cloud Performance 10,000 RPS subscription type.">
    | [API](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#api-rate-limits) | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) |
    | - | - | - |
    | Management API | 5000 | 5000/second |

    | [Endpoint](https://auth0.com/docs/api/management/v2) | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
    | - | - | - | - | - |
    | [Read Organizations](https://auth0.com/docs/api/management/v2/organizations/get-organizations) | `GET` | 1,000 | 10,000/minute | Any request |
    | [Read Organizations by ID](https://auth0.com/docs/api/management/v2/organizations/get-organizations-by-id) | `GET` | 4,000 | 50,000/minute | Any request |
    | [Read Organizations by Name](https://auth0.com/docs/api/management/v2/organizations/get-name-by-name) | `GET` | 2,000 | 20,000/minute | Any request |
    | [Write an Organization](https://auth0.com/docs/api/management/v2/organizations/post-organizations) | `POST`, `PATCH`, `DELETE` | 500 | 15,000/minute | Any request |
    | [Read Organization Members](https://auth0.com/docs/api/management/v2/organizations/get-members) | `GET` | 4,800 | 60,000/minute | Any request |
    | [Write Organization Members](https://auth0.com/docs/api/management/v2/organizations/post-members) | `POST`, `DELETE` | 2,400 | 24,000/minute | Any request |
    | [Read Members of an Organization](https://auth0.com/docs/api/management/v2/organizations/get-members) | `GET` | 2,400 | 24,000/minute | Any request |
    | [Read Organization Member Roles](https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles) | `GET` | 2,400 | 24,000/minute | Any request |
    | [Write Organization Member Roles](https://auth0.com/docs/api/management/v2/organizations/post-organization-member-roles) | `POST`, `DELETE` | 2,400 | 24,000/minute | Any request |
    | [Read Organization Connections](https://auth0.com/docs/api/management/v2/organizations/get-enabled-connections) | `GET` | 1,200 | 12,000/minute | Any request |
    | [Write Organization Connections](https://auth0.com/docs/api/management/v2/organizations/post-enabled-connections) | `POST`, `PATCH`, `DELETE` | 600 | 18,000/minute | Any request |
    | [Write Custom Domain](https://auth0.com/docs/api/management/v2/custom-domains/post-verify) | `POST` | 5 | 5/minute | Any request |
    | [Write Status Connection](https://auth0.com/docs/api/management/v2/connections/get-status) | `POST` | 100 | 15/second | Any request |
    | [Write Signing Keys](https://auth0.com/docs/api/management/v2/keys/post-signing-keys) | `POST` | 5 | 5/day | Any request |
    | [Write Token Exchange Profiles](/docs/authenticate/custom-token-exchange/configure-custom-token-exchange#create-custom-token-exchange-profile) | `POST`, `PATCH`, `DELETE` | 15 | 300/minute | Any request |
    | [Read Token Exchange Profiles](/docs/authenticate/custom-token-exchange/configure-custom-token-exchange#manage-custom-token-exchange-profile) | `GET` | 2000 | 20000/minute | Any request |
  </Accordion>

  <Accordion title="Universal Login Flow Endpoints: Rate limits for the endpoints utilized for the Universal Login Authentication Flow for all subscription types.">
    | Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
    | - | - | - | - | - |
    | Universal login prompts (global) | `GET`, `POST` | 500 | 500/minute | From an IP Address |
    | Universal login prompts (per prompt) | `GET` | 20 | 10/minute | From an IP Address and state value. |
    | Universal login prompts (per prompt) | `POST` | 10 | 5/minute | From an IP Address |
    | Password reset prompt | `GET` | 500 | 500/minute | From an IP Address |
    | MFA push enrollment prompt | `GET`, `POST` | 500 | 500/minute | From an IP Address |
    | MFA push challenge prompt | `GET`, `POST` | 500 | 500/minute | From an IP Address |
    | MFA SMS enrollment prompt | `GET` | 20 | 10/minute | From an IP Address |
    | MFA SMS enrollment prompt | `POST` | 10 | 5/minute | From an IP Address |
    | MFA SMS enrollment verify prompt | `GET` | 20 | 10/minute | From an IP Address |
    | MFA SMS enrollment verify prompt | `POST` | 10 | 5/minute | From an IP Address |
    | Passwordless SMS challenge prompt | `GET`, `POST` | 5 | 5/minute | From an IP Address |
    | Passwordless email challenge prompt | `GET`, `POST` | 5 | 5/minute | From an IP Address |
    | Phone verification enrollment prompt | `GET`, `POST` | 5 | 5/minute | From an IP Address |
    | Phone verification challenge prompt | `GET`, `POST` | 5 | 5/minute | From an IP Address |
    | Device code prompt | `GET`, `POST` | 5 | 5/second | From an IP Address |
  </Accordion>

  <Accordion title="Additional MFA rate limits: Additional MFA rate limits.">
    | Endpoint | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | Limit |
    | - | - | - | - | - |
    | OTP (6 numeric digits) failures | 10 | 10 | per hour | To a unique User ID |
    | Recovery code failures | 10 | 10 | per hour | To a unique User ID |
    | Webauthn challenge failures | 15 | 15 | per minute | To a unique User ID |
    | Webauthn challenge generated | 15 | 15 | per minute | To a unique User ID |
    | Push notifications sent per user | 5 | 5 | per minute | To a unique User ID |
    | SMS sent per user | 10 | 1 | per hour | To a unique User ID |
    | Email sent per user | 20 | 1 | per minute | To a unique User ID |
  </Accordion>

  <Accordion title="My Account API: Rate limits for the My Account API endpoints in the Private Cloud Performance 10,000 RPS (100x) subscription type.">
    Tenant Level:

    | Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
    | - | - | - | - | - |
    | Read Authentication Methods | `GET` | 2000 | 2000/second | Any request |
    | Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2000 | 2000/second | Any request |
    | Read Authentication Methods (filtered) | `GET` | 4000 | 4000/second | Any request |

    User Level:

    | Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type |
    | - | - | - | - | - |
    | Read Authentication Methods | `GET` | 5 | 5/minute | To a unique User ID |
    | Write Authentication Methods | `POST`, `PUT`, `DELETE` | 5 | 5/minute | To a unique User ID |
    | Read Authentication Methods (filtered) | `GET` | 20 | 20/minute | To a unique User ID |
  </Accordion>
</AccordionGroup>