Rate limits & quotas
Two separate limits: requests per minute, and requests per month.
Per-minute rate limit
Each account has a per-minute limit set by its plan (see pricing). Every authenticated response includes:
x-ratelimit-limit | Requests allowed per minute |
x-ratelimit-remaining | Requests left in the current window |
retry-after | On a 429, seconds until the window resets |
The limit is shared across all keys on the account. Payroll runs are bursty: cache lookups per (state, pay date) for the duration of a run instead of calling once per employee.
Monthly quota
Each plan includes a number of requests per calendar month (UTC). Only successful requests made with live keys count. Test-key requests and errors are free.
- Paid plans keep working past the included amount; overage is billed per started 1,000 requests.
- Sandbox has a hard cap. Once reached, live requests return
429 QUOTA_EXCEEDEDuntil the next month.
Live-key responses include x-quota-limit and x-quota-used so you can alert before you run out. Track usage and the projected invoice in your dashboard.