From 3e972e816c8886cdfec49e128b718e4cb277a09b Mon Sep 17 00:00:00 2001
From: Pascal Fischer <32096965+pascal-fischer@users.noreply.github.com>
Date: Wed, 10 Dec 2025 19:46:48 +0100
Subject: [PATCH] add PAT rate limiting info (#514)

---
 src/pages/ipa/guides/authentication.mdx | 5 +++++
 src/pages/manage/public-api/index.mdx   | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/src/pages/ipa/guides/authentication.mdx b/src/pages/ipa/guides/authentication.mdx
index 6df8cb3d..da8b92b6 100644
--- a/src/pages/ipa/guides/authentication.mdx
+++ b/src/pages/ipa/guides/authentication.mdx
@@ -1,3 +1,4 @@
+import {Note} from "../../../components/mdx";
 export const description =
   'In this guide, we’ll look at how authentication works. NetBird offers two ways to authenticate your API requests: OAuth2 and personal access tokens.'
 
@@ -20,6 +21,10 @@ Always keep your token safe and reset it if you suspect it has been compromised.
 
 When establishing a connection using [PATs](/manage/public-api), you will need your access token — you can create one in the [NetBird dashboard](https://app.netbird.io/users) under User settings. It is recommended to use [service users](/manage/public-api) for all organization wide flows calling the API.  Here's how to add the token to the request header using cURL:
 
+<Note>
+    For the cloud solution we are limiting the usage to 120 requests per minute with burst of 1200 requests. If your workload requires more requests, please contact us at [support@netbird.io](mailto:support@netbird.io).
+</Note>
+
 ```bash {{ title: 'Example request with personal access token' }}
 curl https://api.netbird.io/api/users \
   -H "Authorization: Token {token}"
diff --git a/src/pages/manage/public-api/index.mdx b/src/pages/manage/public-api/index.mdx
index 565bd0b1..619da3ec 100644
--- a/src/pages/manage/public-api/index.mdx
+++ b/src/pages/manage/public-api/index.mdx
@@ -65,6 +65,10 @@ Be aware that once you close the popup it is impossible to see the plain version
 
 Once you have created an access token, you can use it to authenticate API requests to NetBird. See [NetBird API](/api/introduction) documentation for detailed usage.
 
+<Note>
+    For the cloud solution we are limiting the usage to 120 requests per minute with burst of 1200 requests. If your workload requires more requests, please contact us at [support@netbird.io](mailto:support@netbird.io).
+</Note>
+
 For example, if you were using the API, you might include your personal access token like this:
 
 ```bash {{ title: 'Example request with personal access token' }}