API Rate Limits
The Flat’s REST API includes a rate-limiting system that allows us to protect our quality of service. You can contact us if you need extra quota.
Authenticated requests are limited to 7,200 requests per hour. Note that some accounts may have different quotas depending on their configuration. Unauthenticated requests, which are tied to the originating IP address rather than a specific user or application, are limited to 1,800 requests per hour. To maintain the quality and stability of our service, additional rate limits may apply to certain API endpoints or actions.
You can check the returned HTTP headers of any API request to see your current rate limit status:
curl -i https://api.flat.io/v2/me
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2017 17:06:20 GMT
X-RateLimit-Limit: 5000
X-RateLimit-Remaining: 4999
X-RateLimit-Reset: 1490465178
The headers tell you everything you need to know about your current rate limit status:
| Header name | Description |
|---|---|
X-RateLimit-Limit |
The maximum number of requests that the consumer is permitted to make per hour. |
X-RateLimit-Remaining |
The number of requests remaining in the current rate limit window. This value can be negative if you try to go over the allowed quota. |
X-RateLimit-Reset |
The time at which the current rate limit window resets in UTC epoch seconds. |
If you need the time in a different format, any modern programming language can get the job done. For example, if you open up the console on your web browser, you can easily get the reset time as a JavaScript Date object.
new Date(1490465178 * 1000).toString()
'Sat Mar 25 2017 19:06:18 GMT+0100 (CET)'
Once you go over the rate limit you will receive an error response:
curl -i https://api.flat.io/v2/me
HTTP/1.1 403 Forbidden
X-RateLimit-Limit: 5000
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1490465829
{
"message": "API rate limit exceeded for xx.xxx.xxx.xx",
"code": "API_RATE_LIMIT_EXCEEDED"
}