API rate limits

This page describes Fintoc's two API rate limits, what happens when you exceed them, and how to handle 429 Too Many Requests responses. Two rate limits apply:

1. Organization rate limit: 100 requests per second per organization, across the Fintoc API.
2. Widget connection rate limit: 100 requests per 130 seconds per organization, across Widget connections.

These limits are maximums. Keep your request volume below them, and handle any rate-limited responses gracefully.

Fintoc adjusts these limits over time, lowering a limit to prevent abuse or raising a limit for integrations that need more than the default limits. To request a higher limit, contact support at least one month before you need it.

Handle rate limiting

Watch for 429 Too Many Requests responses and retry the request with exponential backoff. Start at a 1-second delay and double the delay on each attempt: 1s, 2s, 4s, and 8s. Retry up to 5 times, and add up to 1 second of random jitter to each delay so retries from different clients do not synchronize.