# Rate limits transcribed from the provider's own documentation — see provenance. Quoted, not derived.
generated: '2026-09-20'
method: searched
source: https://developers.chatwoot.com/self-hosted/monitoring/rate-limiting
sources:
- https://developers.chatwoot.com/self-hosted/monitoring/rate-limiting
provenance:
  tool: planning/api-economics/harvest_ratelimits.py
  run: 20260920T133210
  grounding: every limit_text was found verbatim in the fetched page text
published: true
note: Self-hosted rack_attack limits; no headers or status codes documented.
limit_count: 8
limits:
- name: Global IP throttle
  limit_text: 3000 requests per 1 minute
  limit: 3000
  window: minute
  scope: ip
- name: Signup requests
  limit_text: 5 requests per 5 minutes
  limit: 5
  scope: ip
  endpoint: Signup
- name: SignIn by IP
  limit_text: 5 requests per 20 seconds
  limit: 5
  scope: ip
  endpoint: SignIn
- name: SignIn by email
  limit_text: 20 requests per 5 minutes
  limit: 20
  scope: user
  endpoint: SignIn
- name: Reset password
  limit_text: 5 requests per 1 hour
  limit: 5
  window: hour
  scope: user
  endpoint: Reset Password
- name: Widget conversation creation
  limit_text: 6 requests per 12 hours
  limit: 6
  scope: ip
  endpoint: Widget conversation creation
- name: Widget contact updates
  limit_text: 60 requests per 1 hour
  limit: 60
  window: hour
  scope: ip
  endpoint: Widget contact updates
- name: New widget sessions
  limit_text: 5 requests per 1 hour
  limit: 5
  window: hour
  scope: ip
  endpoint: New widget sessions without an existing conversation token