Skip to main content
This page lists the limits that apply across the API. Other pages link here instead of repeating them.

Rate limits

Requests are rate-limited per organization. All API keys in an organization share one limit, and each API instance enforces its own ceiling. Build to this guidance: When you exceed the limit, the API returns 429 with the code rate_limit_exceeded and a Retry-After header. Every response carries these headers: For higher throughput, contact us about enterprise rate limits.

Sizes and counts

Retries

A transient event failure retries automatically up to 5 times, after 2, 4, 8, 16, and 32 seconds. A validation failure is terminal. See Event processing. Your webhook endpoint can slow delivery with a 429 response and a Retry-After header. Scrip honors values up to 1 hour. See Webhooks.

Durations

Fields that take a duration accept a number followed by a unit. You can combine units, as in 1w2d12h. 30d and 720h are equivalent. A pending redemption deadline accepts 60 seconds through 365 days. See Redemption lifecycle. Timestamps are RFC 3339, for example 2026-10-11T10:30:00Z.