Rate Limiting & Quotas

Request quotas, tier limits, and rate limit inspection headers.

To safeguard platform reliability, API requests are subject to throttling quotas that vary by endpoint.

Standard Quotas - Anonymous requests: 20 requests per minute per IP. - Authenticated requests (API key or JWT): 200 requests per minute per user. - Authentication endpoints (login, OTP requests): 5 requests per minute. - Bulk CSV uploads: 10 requests per minute. - Public storefront endpoints: 120 requests per minute; the public quote endpoint allows 60/min and order placement 30/min.

Handling 429 Responses When a quota is exceeded, the API returns `429 Too Many Requests` with an error body whose message states when the request can be retried:

{
  "error": {
    "type": "rate_limit_exceeded",
    "code": "THROTTLED",
    "message": "Request was throttled. Expected available in 12 seconds.",
    "details": {}
  }
}

Implement exponential backoff and jitter when polling or retrying failed requests.

Rate Limiting & Quotas

Handling 429 Responses When a quota is exceeded, the API returns 429 Too Many Requests with an error body whose message states when the request can be retried:

Handling 429 Responses When a quota is exceeded, the API returns `429 Too Many Requests` with an error body whose message states when the request can be retried: