Skip to main content

​
Rate limits

Firmium rate-limits the API to keep usage fair and the system stable. Every request counts against your limit.

​
Overview

  • Limits cap how many requests you can make in a time window.
  • If you exceed the limit, the API returns 429 until the window resets.

​
Limits

  • Each API key has its own limit per minute and per day. New keys start at 60 requests per minute and 10,000 requests per day.
  • Some endpoints, such as exports and login, have additional, stricter limits.
  • Unauthenticated requests are limited more strictly than authenticated ones.
  • The API does not send remaining-quota headers. When you are throttled, the response includes a Retry-After header with the number of seconds to wait.

​
Errors

​
429 Too Many Requests

The response carries the header Retry-After: 42.

​
Best practices

  1. Backoff: Use exponential backoff on 429.
  2. Retry-After: Wait for the number of seconds in the Retry-After header before retrying.
  3. Cache: Avoid repeat requests for data that rarely changes.