Consideration when using Management API

Hello. I’m doing a PoC for Auth0, I have a question.
Should I control load flow and sanitize attack codes when using the Management API from our application?
I am concerned about the possibility of being blocked by the Management API due to a certain load or an unauthorized request.