> ## Documentation Index > Fetch the complete documentation index at: https://auth0.com/llms.txt > Use this file to discover all available pages before exploring further. > Rate limit policies for the Free Public subscription type. # Free See below for the rate limit policies for the Free subscription type. | [API](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#api-rate-limits) | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | | ------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | | Authentication API | 300 | 300/minute | | Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type | | ------------------------------------------------------------------------------------------------------------------------------ | --------- | ------------------------------------------------------------------------- | ------------------- | ----------------------- | ----------------------------------------------------- | | User Info | GET, POST | `/userinfo` | 10 | 5 per/min | To a unique user ID | | Change Password | POST | `/dbconnections/change_password` & `u/reset-password/request/:connection` | 10 | 1 per/min | From an IP address to a unique email address | | Get Passwordless Code or Link | GET, POST | `/passwordless/start` | 50 | 50 per/hr | From an IP address | | Get Token | POST | `/oauth/token` | 30 | 30 per/sec | Any request | | Cross Origin Authentication | POST | `co/authenticate` | 5 | 5 per/sec | Any request | | Authentication | POST | `/usernamepassword/login` | 5 | 5 per/sec | Any request | | JSON Web Token Keys | GET | `/.well-known/jwks.json` | 20 | 20 per/sec | Any request | | Native Social Login | POST | `/oauth/token` | 50 | 50 per/min | Any Request for Apple or Facebook Native Social Login | | [Dynamic Application (Client) Registration](https://auth0.com/docs/api/authentication#dynamic-application-client-registration) | POST | `/oidc/register` | 5 | 5 per/sec | Any request | | [On-Behalf-Of Token Exchange](/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange) | `POST` | 2 | 2/second | Any Request | | \*Represents the default limit. You can configure the Signup endpoint limit in Auth0 Dashboard. To learn more, read [Suspicious IP Throttling](/docs/secure/attack-protection/suspicious-ip-throttling). | API | Burst Request Limit | Sustained Request Limit | | ---------- | ------------------- | ----------------------- | | Management | 2 | 2/second | | Endpoint | Method | Path | Burst Request Limit | Sustained Request Limit | Limit Type | | ------------------------- | ------------------- | ----------------------------------- | ------------------- | ----------------------- | ----------- | | Register Dynamic Client | POST | `/oidc/register` | 5 | 5/second | Any request | | Verify Custom Domain | POST | `/api/v2/custom-domains{id}/verify` | 5 | 5/minute | Any request | | Read Status Connection | POST | `/api/v2/connections/{id}/status` | 100 | 15/second | Any request | | Rotate Signing Keys | POST | `/api/v2/keys/signing/rotate` | 5 | 5/day | Any request | | Configure email templates | POST, PATCH, DELETE | `/api/v2/email-templates` | 5 | 25/minute | Any request | | Read email templates | GET | `/api/v2/email-templates` | 10 | 50/minute | Any request | | Configure email provider | POST, PATCH, DELETE | `/api/v2/emails/provider` | 5 | 25/minute | Any request | | Read email provider | GET | `/api/v2/emails/provider` | 5 | 25/minute | Any request | Tenant Level: | Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | | -------------------------------------- | ----------------------- | ---------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ----------- | | Read Authentication Methods | `GET` | 2 | 2/second | Any request | | Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/second | Any request | | Read Authentication Methods (filtered) | `GET` | 5 | 5/second | Any request | User Level: | Endpoint | Method | [Burst Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | [Sustained Request Limit](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#rate-limit-algorithm) | Limit Type | | -------------------------------------- | ----------------------- | ---------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ------------------- | | Read Authentication Methods | `GET` | 2 | 2/minute | To a unique User ID | | Write Authentication Methods | `POST`, `PUT`, `DELETE` | 2 | 2/minute | To a unique User ID | | Read Authentication Methods (filtered) | `GET` | 5 | 5/minute | To a unique User ID | | Limit Type | Endpoint Path | Operation | Limit | | -------------------------------------------- | -------------------------------------- | ----------- | --------------------- | | Single SCIM connection endpoint | `/scim/v2/connections/{connection-id}` | Any request | 5 requests per second | | Global tenant limit for all SCIM connections | `/scim/v2/connections/*` | Any request | 5 requests per second |