Skip to main content
Authenticated Partner API endpoints allow 60 requests per minute per API key. The public provider-list endpoint applies the same limit per source IP when no API key is supplied. Sandbox and production enforce their limits independently.

Response headers

Rate-limited endpoints return standard headers that describe the current window: When the limit is exceeded, the API returns:
Wait for the duration indicated by Retry-After before retrying. For transient provider or server failures, use exponential backoff and avoid automatically retrying transaction creation unless your reconciliation logic can safely identify the existing transaction.