Understanding Rate Limiting

Rate limits throttle the number of API calls you can make for any basic CRUD operation.

The system will rate limit if an endpoint is called from a given IP more than:

  • 20 times in a 10-second interval for a GET call.
  • 10 times in a 10-second interval for any POST/PUT/DELETE call.

All rate limits start as soon as the first call is executed. Calls can occur more than once per second, but no more than the limits for each operation type.

When an API request is rate limited, error code 429 is returned along with a response header. The response header includes the retry-after field, which is a retry mechanism that indicates the time required to wait before another call can be made. The following example is a response header that includes the retry-after field. The value 13s indicates 13 seconds:

{
  "content-type": "application/json",
  "date": "Wed, 6 Mar 2024 11:38 GMT",
  "retry-after": "13s"
} 

To learn more, see API Response Codes and Error Messages.