To keep the API available for everyone, requests are rate-limited per client. Exceeding the limit results in throttling, and sustained abuse results in a temporary ban.
Limit: 30 requests/minute per client (M2M).
Best practices:
- Cache and reuse access tokens instead of re-authenticating on every call.
- Space out requests rather than issuing many in rapid succession.
- On a
429/403response, back off exponentially before retrying.
Additional network- and application-layer protections are in place beyond this limit. Contact support if you're consistently hitting this threshold under legitimate use.