Rate limits
The API is rate limited to protect platform stability. When you exceed the limit you receive 429 Too Many Requests:
The limit
Responses include standard RateLimit headers (draft-7), so you can read your remaining quota and reset time programmatically rather than guessing:
Handling 429
- Back off and retry. Wait until the window resets (use the
RateLimit-Resetseconds value), then retry. - Use exponential backoff with jitter if you don’t read the headers.
- Reuse the same
requestIdwhen retrying a verification so the retry is idempotent and never double-charges. - Batch and pace bulk work instead of bursting.
Limits may differ between sandbox and production and can be adjusted for your account. Contact Toden if your production volume needs a higher ceiling.