Skip to content

Rate limits ​

The Admin API allows 50 requests per minute per token and organization. The window is a sliding minute, counted from the first request.

That number is sized for periodic synchronisation: a job that pulls the day's orders every few minutes never gets near it. If you need more, for example to backfill history, tell us when you request access and we raise it for your token.

Headers ​

Every response carries the current state of the limit.

HeaderMeaning
X-RateLimit-LimitRequests allowed per minute.
X-RateLimit-RemainingRequests left in the current window.

When the limit is exceeded the response is 429 Too Many Requests and two more headers are added:

HeaderMeaning
Retry-AfterSeconds to wait before trying again.
X-RateLimit-ResetUnix timestamp at which the window resets.
json
{
  "success": false,
  "message": "Too many requests. Please try again later."
}

Advice ​

  • Read X-RateLimit-Remaining and slow down before you hit zero rather than after.
  • Page through lists sequentially. Fetching all pages in parallel is the most common way to trip the limit.
  • Cache establishments and products. They change rarely; orders are the only list that needs frequent polling.

Private API. Access is granted per organization.