API Terms/Security & Auth/Okta API

Okta API

okta.com

Provides identity, single sign-on, multi-factor authentication, and user lifecycle/directory management through RESTful endpoints under an organization's Okta domain.

The Okta API API uses oauth2 authentication; has paid pricing; offers a free tier (30-day free trial; Integrator Free Plan org also referenced); rate limits: Authenticated users: 40 requests per user per 10 seconds per endpoint (20/5s and 10 per state token/5s for Identity Engine); non-authenticated per-username limits e.g. /api/v1/authn and /oauth2/v1/token 4 per second; org buckets vary by subscription; HTTP 429 on exceed. Verified 2026-07-13 with per-field source links.

Security & Auth Verified 2026-07-13 high confidence
Base URL
https://{yourOktaDomain}/api/v1/
developer.okta.com ↗
Free tier
30-day free trial; Integrator Free Plan org also referenced
okta.com ↗
Pricing model
paid
okta.com ↗
Pricing
Workforce Identity sold per-user/month billed annually: Starter $6, Core Essentials $14, Essentials $17; Professional and Enterprise are custom-quoted. Customer Identity Enterprise base platform from $3K/month.
okta.com ↗
Rate limits
Authenticated users: 40 requests per user per 10 seconds per endpoint (20/5s and 10 per state token/5s for Identity Engine); non-authenticated per-username limits e.g. /api/v1/authn and /oauth2/v1/token 4 per second; org buckets vary by subscription; HTTP 429 on exceed
developer.okta.com ↗
OpenAPI spec
not documented null
no source
MCP server
not documented null
no source