← Documentation

API Rate Limits

What the limit is, and what your client should be ready for.

The limit

The fair-use limit is 600 requests per minute per API key, across all v1 endpoints. Virtually every real integration — Zaps, CRM syncs, order feeds — sits far below this. If you have a workload that genuinely needs more (a large bulk import, a migration), contact us first and we'll make room.

The 429 contract

Requests over the limit may be rejected with HTTP 429 and the error code rate_limited (see API error codes). Build for it now:

  • Retry with exponential backoff and jitter; honor a Retry-After header when present.
  • Spread bulk work over time instead of bursting — batches of a few requests per second complete comfortably within the limit.
  • Retries are safe: issuance, points with externalRef, and Process Order are idempotent and return the original result rather than double-applying.

Webhooks don't count

Deliveries from Pass Studio to your endpoints (webhooks, Zapier triggers) are outbound and don't consume your request budget. Only calls you make to /api/v1/* count.