Rate limits

Use this guide when handling 429 responses or planning storefront traffic.

Default limits

Authenticated API keys are currently limited to 60 requests per minute per key. Public browser routes are limited separately by origin and IP.

Headers

Every API response includes rate limit metadata when available.

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
X-RateLimit-Reset: 1760000000

When a request is limited, the response includes Retry-After.

Common handling

Back off until Retry-After. Do not retry immediately in a loop from the browser widget.

See Errors.