Rate limits

The Pallyy API allows 5 requests per second per account, counted in fixed one-second windows. The limit is shared across all of the account's API keys.

Rate limit headers

Every response includes headers describing your current window:

Exceeding the limit

Once the window is used up, further requests receive a 429 response with a Retry-After: 1 header and this error body:

{
  "statusCode": 429,
  "statusMessage": "Rate limit exceeded",
  "data": {
    "code": "rate_limit_exceeded",
    "count": 5,
    "max": 5
  }
}

Handling limits in your client

• Watch X-RateLimit-Remaining and slow down before you hit zero.
• On a 429, wait for the duration in Retry-After (one second) and retry.
• Spread bulk work out instead of bursting. Windows are only a second long, so a short pause is always enough to recover.