API rate limits

  • Tier: Free, Premium, Ultimate
  • Offering: GitLab Self-Managed, GitLab Dedicated

Most API requests count against the general user and IP rate limits. For some APIs, you can configure a separate rate limit instead. An API rate limit supersedes the general limits for requests to that API. You can raise or lower the limit for a single API without changing the general limits. No other behavior changes.

To configure these limits, go to the Admin area and select Settings > Network.

Available API rate limits

API Description
Audit events API Limit requests that retrieve instance audit events.
Deprecated endpoints Restrict endpoints that have replacements but cannot be removed without breaking backward compatibility.
Groups API Limit requests that list, retrieve, create, and archive groups, and that list and delete group members.
Organizations API Limit requests that create organizations.
Package registry Limit requests to the Packages API, which downstream projects call to resolve dependencies.
Projects API Limit requests that list, retrieve, and create projects, and that list and delete project members.
Repository files API Limit requests that fetch, create, update, and delete files in a repository.
Users API Limit requests that read the followers, status, SSH keys, and GPG keys of a user.