Rate Limiting

Overview of the different rate limit tiers.

Rate limits define the maximum number of requests a single account can make within a given period of time. When you exceed a rate limit, the API request will fail and return a HTTP 429 (Too Many Requests) status code.

The Zylo Enterprise API applies rate limits at the account level. This means that each API key created within an account will be restricted to the same rate limiting restrictions.

Rate Limit Types

The following table lists the different rate limit types that can be applied to each operation.

TypeRequests per 15 minutes
basic5000 requests
limited500 requests

Check current rate limit in headers

To check on the current rate limit for your account, look at the headers from the recent response using an API key. In the headers, there are metrics surrounding the current rate limit status:

  • x-rate-limit-limit - the rate limit ceiling that is applicable to the current rate limit type
  • x-rate-limit-remaining - the number of requests left for the current rate limit window
  • x-rate-limit-reset - the time (in seconds) before the rate limit window resets

Below is an example:

x-rate-limit-limit: 5000
x-rate-limit-remaining: 4527
x-rate-limit-reset: 300 # 5 minutes