Skip to main content

Project Rate Limits

Ory Network enforces the following rate limit policies based on the subscription tier of your project.

Project APIs

Rate-Limits defined on a project basis dependent on your subscription tier. This includes the following service APIs and paths:

  • Login & Identity APIs
  • OAuth2 & OIDC APIs
  • Permission APIs
  • Account Experience UI

Project-Based API Limits

This table lists all limits which are enforced on the APIs of a project (e.g. <project-slug>.projects.oryapis.com/* or <custom-hostname>/* (e.g. auth.mydomain.com/*)). Ratelimits are dependent on the Subscription Plan of the project.

Subscription PlanPath BucketRate Limits (burst/sustained)
Develop/sessions/whoami
/identities:
*:
15 rps / 450 rpm
1 rps / 10 rpm
15 rps / 450 rpm
Essentials/sessions/whoami:
/identities:
*:
80 rps / 1800 rpm
10 rps / 300 rpm
40 rps / 900 rpm
Scale/sessions/whoami:
/identities:
*:
800 rps / 18000 rpm
20 rps / 600 rpm
400 rps / 9000 rpm