Rate Limiting

The limit

Each API key may make up to 10 requests per second (token bucket of 10, refilled every second). The limit is per key, across all endpoints.

Rate limit headers

Every response includes your current rate limit state:

Header	Meaning
`X-RateLimit-Limit`	Your requests-per-second limit (`10`)
`X-RateLimit-Remaining`	Requests remaining in the current window
`X-RateLimit-Reset`	When the window resets (Unix epoch seconds)

When you exceed the limit

The API returns 429 Too Many Requests:

{
  "errorCode": "rate_limit_exceeded",
  "message": "Rate limit exceeded"
}

Recovery: pause requests for 1 second, then resume. For bulk workloads (e.g. sending thousands of rewards), throttle your client to stay under 10 req/s rather than reacting to 429s — a simple queue with a 100ms+ gap between requests works well.

📘
Need a higher limit for a launch or campaign? Contact [email protected].