GitLab.com Ties API Rate Limits to Subscription Tier Starting Oct 19

GitLab is restructuring how it throttles traffic to GitLab.com, moving from flat limits to caps that scale with your subscription. The shift lands in two waves: Free accounts and unauthenticated traffic hit the new ceilings on October 19, 2026, while Premium and Ultimate tiers follow in January 2027. Limits apply per user and per top-level group, and anonymous requests — those arriving without credentials — are capped hard at 60 per hour per IP, regardless of whether they target a paid account. GitLab frames the change as a load-management move, citing platform demand it expects to multiply this year as teams pile on automation and AI agent workloads.

The practical takeaway is that authentication is the lever. Attaching a personal access token, OAuth token, or CI/CD job token moves a request off the 60-per-hour anonymous bucket and onto the far higher per-plan limits. GitLab is also nudging heavy API users toward batching, caching, pagination, and exponential backoff instead of tight polling loops; clients that respect the HTTP 429 and Retry-After responses will largely self-correct. To de-risk the rollout, GitLab is running two ‘brownout’ preview windows on October 7 and October 14 (15:00–19:00 UTC), briefly switching the new Free and anonymous limits on so operators can watch their own workloads behave before the change is permanent.

GitLab says most users already sit well within the new thresholds and won’t notice anything — normal git operations, CI/CD, and UI browsing are unaffected. The pain will concentrate on public, high-traffic projects fielding anonymous automation and a subset of Free-tier heavy hitters, whose options are to get callers to authenticate, make the project private, or upgrade. Notably, this is a GitLab.com-only change: Self-Managed and Dedicated instances keep whatever limits their operators set. GitLab also teased a forthcoming way to buy capacity above standard plan limits, plus an in-product usage view, both due later this year.