Base URL
Authentication
All API requests require a Bearer token in theAuthorization header:
Rate Limits
The API enforces rate limits per IP address. If you receive a429 response, respect the Retry-After header and retry with exponential backoff.
Global Rate Limit
All endpoints are subject to a global rate limit:- 120 requests per minute per IP address
Rate Limit Headers
When you make a request, the API returns rate limit information in response headers:| Header | Description |
|---|---|
X-RateLimit-Limit | The rate limit for the endpoint (requests per minute) |
X-RateLimit-Remaining | The number of requests remaining in the current window |
X-RateLimit-Reset | Unix timestamp (seconds) when the rate limit window resets |
Retry-After | Seconds to wait before retrying (included in 429 responses) |
Handling 429 Responses
When rate limited, the API responds with429 Too Many Requests:
Best Practices
- Check the
Retry-Afterheader before retrying a rate-limited request - Implement exponential backoff for retries
- Batch requests when possible to reduce API calls
- Monitor rate limit headers in responses to adjust request frequency proactively
422) include a detail array with specific field-level error information.