> ## Documentation Index
> Fetch the complete documentation index at: https://docs.money.orki.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Rate limits

> Partner API request limits, response headers, and retry guidance.

Authenticated Partner API endpoints allow **60 requests per minute per API key**. The public provider-list endpoint applies the same limit per source IP when no API key is supplied.

Sandbox and production enforce their limits independently.

## Response headers

Rate-limited endpoints return standard headers that describe the current window:

| Header                  | Description                                         |
| ----------------------- | --------------------------------------------------- |
| `X-RateLimit-Limit`     | Maximum requests allowed during the current window. |
| `X-RateLimit-Remaining` | Requests remaining in the current window.           |
| `Retry-After`           | Seconds to wait after receiving a `429` response.   |

When the limit is exceeded, the API returns:

```json theme={null}
{
  "msg": "Rate limit exceeded. Please retry after the period indicated by the Retry-After header.",
  "code": 429,
  "success": false
}
```

Wait for the duration indicated by `Retry-After` before retrying. For transient provider or server failures, use exponential backoff and avoid automatically retrying transaction creation unless your reconciliation logic can safely identify the existing transaction.