Rate limits - Onstacks

Limits apply per route group and per source IP address, over a rolling one-minute window.

When you’re rate limited

429 response

HTTP/1.1 429 Too Many Requests
Retry-After: 42

{
  "data": null,
  "error": {
    "code": "rate_limit_exceeded",
    "message": "too many requests for this route",
    "details": { "scope": "transfers.create", "retry_after_seconds": 42 }
  },
  "request_id": "req_a1b2c3d4"
}

Wait for Retry-After seconds before retrying. The same value is in error.details.retry_after_seconds.

Default limits

Route group	Default limit
`transfers.create`, `ramp.quote`, `ramp.payment`	10 per minute
`transfers.approve`, `transfers.cancel`	20 per minute
`api_keys.create`, `api_keys.revoke`	10 per minute
`webhooks.*`	120 per minute

Limits are keyed by source IP address, not by API key or workspace. Integrations that share an outbound IP, for example behind the same NAT gateway, share a bucket for each route group.