Security & Limits
Usage, Quotas & Plans
MockBase is free to use without an account, with a small trial-sized allowance. Signing in raises it; Pro — free for everyone during the beta — raises it further and unlocks a few advanced features.
Trying it without an account
An anonymous session (no sign-in) can have:
- 1 mock
- 4 routes on it
Importing an OpenAPI spec that would generate more than 4 routes doesn't fail outright — MockBase keeps the first 4 and reports how many it dropped via an X-Mockbase-Routes-Dropped response header, so you still get a working mock to start from.
Sign in and every mock you built anonymously moves with you into your account automatically — nothing is lost, and the anonymous limits stop applying.
Monthly request quota
Every request served by one of your mocks counts against a monthly quota that resets at the start of each calendar month (UTC):
| Identity | Requests / month |
|---|---|
| Anonymous | 100 |
| Signed in (Free) | 500 |
| Pro | 20,000 |
A mock with no owner at all (nobody was signed in when it was created, and it's never been claimed) isn't metered, since there's no account to bill it against.
Anonymous usage is also capped per IP address, at five times the anonymous quota — so cycling through anonymous sessions from the same machine doesn't multiply your allowance.
Check the Usage panel on the Dashboard (or GET /api/v1/billing/usage) to see where you stand. Once you're over quota, requests get 429 with a Retry-After header instead of a response; X-Quota-Limit / X-Quota-Remaining are included on every response so you can watch it coming.
Rate limits
Separate from the monthly quota, calls to a mock's public endpoint are rate-limited per IP address to 120 requests per minute. This protects against bursts, not your monthly allowance — you can be well under quota and still get a 429 if you fire requests faster than that. Managing your mocks (creating, editing — not calling them) has its own, stricter limit of 60 requests per minute.
Free vs. Pro
Pro unlocks:
- Chaos injection
- Record & Replay
- Custom subdomains
- Token protection
- The higher, 20,000-request monthly quota
MockBase is in beta, and every signed-in account is treated as Pro for free during it — anonymous sessions are the only ones held to the Free limits above. Check the Dashboard (or GET /api/v1/billing/subscription) for your current status.