The public API is rate limited per API key to keep the platform fast and fair.
The limit
| Scope | Limit |
|---|
| Per API key | 100 requests per minute |
Requests are counted per key; unauthenticated requests are counted per IP.
When you exceed it
You receive 429 Too Many Requests. The response carries headers telling you how long
to wait:
| Header | Meaning |
|---|
Retry-After | Seconds to wait before retrying. |
X-RateLimit-Limit | Your per-minute limit. |
X-RateLimit-Remaining | Requests left in the current window. |
HTTP/1.1 429 Too Many Requests
Retry-After: 23
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 0
Handling it
- Back off and retry after
Retry-After.
- Spread bulk work over time instead of bursting.
- Use pagination rather than many small requests.
The PHP SDK retries 429 automatically with exponential backoff and jitter, and honours
Retry-After. You usually don’t need to handle it yourself.