The rate limits for Ory Identities and Ory Permissions APIs depend on your Ory Network subscription plan (Developer, Production, Growth, or Enterprise) and the environment (Production, Staging, or Development) your project is running in. ### Ory Identities API Rate Limits The most relevant endpoints for Ory Identities are: -

/sessions/whoami

-

GET /admin/identities

-

POST /admin/identities

-

POST /admin/recovery/*

-

POST /self-service/registration

-

POST /self-service/recovery

-

POST /self-service/settings

-

POST /self-service/verification

-

/scim/**

#### Example: Developer Plan (all environments) | Endpoint | Burst (rps) | Sustained (rpm) | |-----------------------------|-------------|-----------------| |

/sessions/whoami

| 10 | 300 | |

GET /admin/identities

| 1 | 10 | |

POST /admin/identities

| 1 | 10 | |

POST /admin/recovery/*

| 1 | 10 | |

POST /self-service/*

| 1 | 10 | |

/scim/**

| 1 | 10 | |

*

(all other endpoints) | 5 | 150 | #### Example: Production Plan (Production environment) | Endpoint | Burst (rps) | Sustained (rpm) | |-----------------------------|-------------|-----------------| |

/sessions/whoami

| 80 | 1800 | |

GET /admin/identities

| 10 | 300 | |

POST /admin/recovery/*

| 10 | 30 | |

/scim/**

| 10 | 300 | |

*

(all other endpoints) | 40 | 900 | > For full details and other plans (Growth, Enterprise), see the [Ory rate limit tables](https://www.ory.sh/docs/guides/rate-limits#rate-limit-tables-by-subscription-plan) and adjust according to your plan and environment. ### Ory Permissions API Rate Limits The main endpoint for Ory Permissions (Ory Keto) is: -

/relation-tuples/check

#### Example: Developer Plan (all environments) | Endpoint | Burst (rps) | Sustained (rpm) | |-----------------------------|-------------|-----------------| |

/relation-tuples/check

| 10 | 300 | #### Example: Production Plan (Production environment) | Endpoint | Burst (rps) | Sustained (rpm) | |-----------------------------|-------------|-----------------| |

/relation-tuples/check

| 80 | 1800 | > Again, for Growth and Enterprise plans, the limits are higher. See the [rate limit documentation](https://www.ory.sh/docs/guides/rate-limits#rate-limit-tables-by-subscription-plan) for specifics. ### Notes - "Burst" is the maximum requests per second (rps) allowed for short spikes. - "Sustained" is the maximum requests per minute (rpm) for ongoing usage. - Staging and Development environments typically have much lower limits than Production. - Endpoint-based rate limits are not user-configurable, but higher plans (Growth, Enterprise) allow for IP whitelisting and custom arrangements via support. For the most accurate and up-to-date information, always refer to the official [Ory Network rate limits documentation](https://www.ory.sh/docs/guides/rate-limits#rate-limit-tables-by-subscription-plan) and your workspace's subscription details. [Ory Network rate limits documentation](https://www.ory.sh/docs/guides/rate-limits#rate-limit-tables-by-subscription-plan)