specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Google Identity Platform
providerId: google-identity-platform
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: true
tags:
  - Rate Limiting
  - Authentication
  - Google Cloud
  - Identity
description: Google Identity Platform inherits Google Cloud's standard quota and rate-limit model. Limits are
  enforced per-project and per-API-method; defaults are documented in the Google Cloud Console quotas page and
  can be increased on request. Per-project request quotas apply to the Identity Toolkit API and related
  Identity Platform endpoints. SMS phone-auth has separate per-project verification quotas.
sources:
  - https://cloud.google.com/identity-platform/docs/quotas
  - https://cloud.google.com/identity-platform/pricing
  - https://cloud.google.com/docs/quota
responseCodes:
  throttled: 429
  quotaExceeded: 429
  serviceUnavailable: 503
limits:
  - name: Identity Platform API requests
    scope: project
    metric: requests_per_minute
    limit: 'see service-specific quotas page'
    notes: Default project quotas are visible in the Google Cloud Console under IAM > Quotas. Many endpoints
      have a default of around 3,000 requests per minute per project; raise via support.
  - name: Phone authentication SMS sends
    scope: project
    metric: requests_per_day
    limit: 'see service-specific quotas page'
    notes: SMS verification quotas are per-project per-region; raise via Google Cloud support if higher
      throughput is needed.
  - name: Account creation
    scope: project
    metric: varies
    limit: 'see service-specific quotas page'
    notes: Sign-up endpoints have abuse-protection rate limits which can be tuned in the Identity Platform
      console.
policies:
  - name: Backoff Strategy
    description: Clients should implement exponential backoff with jitter when receiving 429 or 503,
      honoring the Retry-After header when present.
  - name: Quota raise via support
    description: Default project quotas can be increased through the Google Cloud Console quota request
      flow; SLA-backed limits available on enterprise contracts.
  - name: Per-project scoping
    description: Quotas are scoped to the Google Cloud project; multi-tenant deployments share the same
      project quota across tenants.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com