ZITADEL Cloud Rate Limits
Rate limits are implemented according to our rate limit policy with the following rules:
| Path | Description | Throttling | One Minute Banning |
|---|---|---|---|
| /ui/login* | Global Login, Register and Reset Limit | 10 requests per second over a minute | 15 requests per sencond over 3 minutes |
| Various API paths 1 | All other gRPC- and REST APIs - Management API - Admin API - Auth API - System API | 10 requests per second over a minute | 10 requests per second over 3 minutes |
1 API paths:
Open to see the reqular expression
/openapi/.*|/oauth/v[0-9]+/.*|/saml/v[0-9]+/.*|/oidc/v[0-9]+/.*|/assets/v[0-9]+/.*|/system/v[0-9]+/.*|/auth/v[0-9]+/.|/admin/v[0-9]+/.|/management/v[0-9]+/.*|zitadel\.system\.v[0-9]+\.SystemService/.*|zitadel\.admin\.v[0-9]+\.AdminService/.*|zitadel\.auth\.v[0-9]+\.AuthService/.*|zitadel\.management\.v[0-9]+\.ManagementService/.*