Rate Limits

Every endpoint is rate limited per source IP, per endpoint. Exceeding the limit returns 429 rate_limit_exceeded with a Retry-After header (in seconds).

Handling 429

• Honor Retry-After. Wait the indicated number of seconds before retrying — do not retry immediately or in a tight loop.
• Design polling with sensible intervals. Status inquiry (statusOnly=true) and verify-reconciliation loops should poll at a measured cadence, not as fast as possible.
• Prefer the push channel. Webhooks exist precisely so you don't have to poll aggressively — react to the webhook, then verify, rather than hammering a read endpoint.

If your integration legitimately needs a higher ceiling, contact support.