Skip to main content
- Rate limits

API rate limits

The API is built for low-to-moderate integration traffic. Pace bursty imports and honor Retry-After when the API asks you to slow down.

Last updated - June 5, 2026 Read time - 3 min Author -

Per-key token bucket

Each API key has a token bucket with a burst of 60 tokens and a refill rate of 1 token per second. Reads cost 1 token. Writes cost 2 tokens.

When the limit is exceeded, the API returns 429 rate_limited.

Rate limit headers

Retry-After: 12
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 2026-06-05T12:00:00.000Z

Wait at least the Retry-After duration before retrying. Reuse the same Idempotency-Key when retrying the same write.

Resend email limit

The order resend endpoint has an additional per-order safety limit of 3 resend requests per hour.

API docs

Start here

API quickstart

Ping the API, import an asset, map it to a product, and assign access to an order.

 Reference

Endpoint reference

Review the available endpoints for assets, mappings, orders, access changes, and status.

Was this helpful?

Still stuck? Email admin@alvaapps.com.

Last updated 2026-06-05