Skip to main content
Requests are limited to 120 per minute, counted per business account (once you’re authenticated — pre-login endpoints like Register are limited per IP address instead). This is one flat limit shared across every endpoint group — there’s no separate, higher limit for read (GET) calls, and no difference between sandbox and live. A rate-limited request returns:
with HTTP status 429. Back off and retry — a fixed delay of a few seconds is enough in practice, since the window is per-minute.
Update API Configuration accepts a rate_limit field, but it isn’t wired up to actually change your limit yet — the 120/minute figure above is what’s enforced today regardless of what you set there.