specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: UiPath
providerId: uipath
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: true
tags:
  - Automation
  - RPA
  - Rate Limiting
description: UiPath publishes per-organization, rolling-five-minute rate limits for the Identity Server
  API (Automation Cloud only — not Public Sector or Dedicated). Each HTTP method has its own ceiling.
  Throttled requests return HTTP 429.
sources:
  - https://docs.uipath.com/automation-cloud/automation-cloud/latest/api-guide/api-rate-limits-for-identity-server
responseCodes:
  throttled: 429
limits:
  - name: Identity Server GET (Automation Cloud)
    scope: account
    metric: requests_per_5_minutes
    limit: 300
    timeFrame: minute
    notes: 300 GET requests per organization per rolling 5-minute window. Automation Cloud only — does
      not apply to Public Sector or Dedicated variants.
  - name: Identity Server POST (Automation Cloud)
    scope: account
    metric: requests_per_5_minutes
    limit: 24000
    timeFrame: minute
    notes: 24,000 POST requests per organization per rolling 5-minute window.
  - name: Identity Server PUT (Automation Cloud)
    scope: account
    metric: requests_per_5_minutes
    limit: 160
    timeFrame: minute
    notes: 160 PUT requests per organization per rolling 5-minute window.
  - name: Identity Server PATCH (Automation Cloud)
    scope: account
    metric: requests_per_5_minutes
    limit: 160
    timeFrame: minute
    notes: 160 PATCH requests per organization per rolling 5-minute window.
  - name: Identity Server DELETE (Automation Cloud)
    scope: account
    metric: requests_per_5_minutes
    limit: 160
    timeFrame: minute
    notes: 160 DELETE requests per organization per rolling 5-minute window.
policies:
  - name: Per-Organization Scope
    description: Limits are enforced per organization, not per user or per application.
  - name: Rolling Window
    description: The 5-minute evaluation window is rolling, not fixed; counters do not reset on a clock
      boundary.
  - name: Cloud Variants
    description: Published Identity Server limits apply to Automation Cloud. Public Sector and Dedicated
      variants follow their own (separately documented) thresholds.
  - name: 429 Handling
    description: On HTTP 429, plan integration to stay within limits and apply backoff. UiPath advises
      designing to stay under the documented thresholds rather than relying on retry.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com