# Rate limits transcribed from the provider's own documentation — see provenance. Quoted, not derived.
generated: '2026-09-20'
method: searched
source: https://clerk.com/docs/guides/how-clerk-works/system-limits
sources:
- https://clerk.com/docs/guides/how-clerk-works/system-limits
provenance:
  tool: planning/api-economics/harvest_ratelimits.py
  run: 20260920T133210
  grounding: every limit_text was found verbatim in the fetched page text
published: true
note: Frontend limits are per user identified by IP; backend limits per application instance identified
  by Secret Key. 10-second windows not representable so window set to none.
limit_count: 14
limits:
- name: Create SignIn
  limit_text: 5 requests per 10 seconds
  limit: 5
  scope: ip
  endpoint: /v1/sign_ins
- name: Create SignUp
  limit_text: 5 requests per 10 seconds
  limit: 5
  scope: ip
  endpoint: /v1/sign_ups
- name: Attempt SignIn
  limit_text: 3 requests per 10 seconds
  limit: 3
  scope: ip
  endpoint: /v1/sign_ins/attempt_(first|second)_factor
- name: Attempt SignUp
  limit_text: 3 requests per 10 seconds
  limit: 3
  scope: ip
  endpoint: /v1/sign_ups/attempt_verification
- name: Backend API general limit - Production instances
  limit_text: 1000 requests per 10 seconds
  limit: 1000
  scope: api-key
  plan: Production instances
  endpoint: All Backend API endpoints
- name: Backend API general limit - Development instances
  limit_text: 100 requests per 10 seconds
  limit: 100
  scope: api-key
  plan: Development instances
  endpoint: All Backend API endpoints
- name: Get the JWKS of the instance
  limit_text: No rate limit
  scope: api-key
  endpoint: GET /v1/jwks
- name: Create invitation
  limit_text: 100 requests per hour
  limit: 100
  window: hour
  scope: api-key
  endpoint: POST /v1/invitations
- name: Create bulk invitations
  limit_text: 25 requests per hour
  limit: 25
  window: hour
  scope: api-key
  endpoint: POST /v1/invitations/bulk
- name: Create Organization invitation
  limit_text: 250 requests per hour
  limit: 250
  window: hour
  scope: api-key
  endpoint: POST /v1/organizations/{organization_id}/invitations
- name: Create Organization invitations in bulk
  limit_text: 50 requests per hour
  limit: 50
  window: hour
  scope: api-key
  endpoint: POST /v1/organizations/{organization_id}/invitations/bulk
- name: Update a user's data or metadata
  limit_text: 10 requests per 10 seconds per user
  limit: 10
  scope: user
  endpoint: PATCH /v1/users/{user_id}
- name: Update an Organization's data or metadata
  limit_text: 10 requests per 10 seconds per Organization
  limit: 10
  scope: unclear
  endpoint: PATCH /v1/organizations/{organization_id}
- name: Update an Organization membership's data or metadata
  limit_text: 10 requests per 10 seconds per Organization membership
  limit: 10
  scope: unclear
  endpoint: PATCH /v1/organizations/{organization_id}/memberships/{user_id}
headers:
- Retry-After
exceeded_status: 429