# M2M tokens quota **URL:** \ **Category:** Get Help\ **Tags:** pricing, quota\ **Created:** [September 2, 2021, 7:22am UTC](https://community.auth0.com/t/m2m-tokens-quota/68980 "2021-09-02T07:22:10Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![xenon314](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/xenon314/32/27281_2.png) [@xenon314](https://community.auth0.com/u/xenon314)\ **Post date:** [September 2, 2021, 7:22am UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/1 "2021-09-02T07:22:10Z")
Hi Team, We would like to use Auth0 for our M2M authentication needs. I understand that 1k M2M tokens are allowed per month: - Wanted to clarify that if this limit is for the issuance/create of the token? - Is there any limit for the validation of the token? Regards, Sunil ---
**Author:** ![john.gateley](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/john.gateley/32/10879_2.png) [@john.gateley](https://community.auth0.com/u/john.gateley)\ **Post date:** [September 2, 2021, 1:01pm UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/2 "2021-09-02T13:01:39Z")
You are correct: it is per token issued. Token validation is done without contacting Auth0 (except for the first validation which retrieves the signature verification keys), we do not count how many times you validate. Be sure to cache M2M tokens so you don’t use too many. John ---
**Author:** ![xenon314](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/xenon314/32/27281_2.png) [@xenon314](https://community.auth0.com/u/xenon314)\ **Post date:** [September 3, 2021, 5:25am UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/3 "2021-09-03T05:25:02Z")
Thanks a lot @john.gateley ---
**Author:** ![madax](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/madax/32/35767_2.png) [@madax](https://community.auth0.com/u/madax)\ **Post date:** [March 9, 2022, 8:52pm UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/4 "2022-03-09T20:52:22Z")
Does it mean if we just create an M2M API for one of our clients and their developer requests a new token every hour (by mistake), it will count as our quota? How can we handle this situation? ---
**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\ **Post date:** [March 9, 2022, 9:53pm UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/6 "2022-03-09T21:53:10Z")
Hi @madax, Yes, any M2M token that is issued for non-Auth0 APIs (i.e. anything not scoped to the management API or authentication API) will count against your quota, even if they are a third party. We don’t currently have a built in feature for handling this, but there is a feature request you can upvote. > [@Add rate limiting and cache for m2m token authentication endpoints](https://community.auth0.com/t/add-rate-limiting-and-cache-for-m2m-token-authentication-endpoints/75367): > > Feature: Provide a short title of your feature request/feedback. Allow cache and rate limiting by client id for m2m token authentication endpoints. Description: Give us some details about your feedback/feature request. Examples, screenshots, videos, etc. are helpful. This is a similar ask related to [Please provide a built-in solution to rate-limit and cache M2M authentication tokens - Auth0 Community](https://community.auth0.com/t/please-provide-a-built-in-solution-to-rate-limit-and-cache-m2m-authentication-tokens/55863) Use-case: Tell us what you are building. How would the feedback/feature improve your experie… ---
**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\ **Post date:** [April 22, 2022, 12:10am UTC](https://community.auth0.com/t/m2m-tokens-quota/68980/7 "2022-04-22T00:10:30Z")