Skip to main content
Fliqr AI enforces rate limits on every API key to protect platform stability and ensure consistent performance for all users. When your application exceeds its request budget, the API returns a 429 Too Many Requests response. Design your integration to read the rate limit headers on every response and back off before the limit is reached — not after.

Request Limits

Each API key has the following budget: The per-minute limit applies on a rolling basis, not a fixed clock boundary. The burst limit allows short spikes in traffic but prevents sustained overload. Both limits are enforced independently — exceeding either triggers a 429.

Rate Limit Headers

Every API response includes three headers that report your current usage: Example response headers:
Check X-RateLimit-Remaining proactively on every response. If it falls below 10, pause your client and wait until the timestamp in X-RateLimit-Reset before sending further requests.

429 Response

When you exceed the rate limit, the API returns: HTTP 429 Too Many Requests
The response also includes a Retry-After header with the number of seconds to wait before retrying. Honor this value — retrying immediately will continue to return 429 and consume your quota for the burst window.

Handling 429 in Code

Implement exponential backoff with a maximum retry count. The following JavaScript example reads the Retry-After header and waits accordingly:
rate-limit-handler.js
For batch operations — such as tagging thousands of contacts — introduce deliberate delays between requests rather than firing them in parallel. A simple approach is to throttle to 80 requests per minute (leaving a 20% safety margin) using a request queue.

Best Practices

  • Read headers, don’t guess. Always inspect X-RateLimit-Remaining rather than assuming your request count is safe.
  • Use bulk endpoints. Where available, prefer endpoints that accept arrays of resources over looping individual calls.
  • Queue background jobs. For high-volume operations, use a task queue with a rate-limited worker rather than making synchronous API calls from a user-facing request path.
  • Avoid concurrent bursts. Fan-out patterns that fire many parallel requests simultaneously are the most common cause of hitting the burst limit.

What’s Next

Authentication

Set up API key authentication and learn key rotation best practices.

Error Codes

See the full error code reference, including how to handle 500-level server errors with backoff.