API rate limits

​

Rate limits

Fintoc applies rate limits to ensure the stability and performance of the API and widget connections. These limits prevent excessive traffic and ensure fair use of the service. Two types of rate limits apply:

1. Organization Rate Limit:
   • Requests per Organization: 100 requests per second.
   • This limit applies to each unique organization accessing our API.
   • It helps prevent abuse and ensures a smooth experience for all users.
2. Widget Connection Rate Limit:
   • Requests per Organization: 100 requests in a window duration of 130 seconds.
   • This limit applies to the widget connections made by each organization.
   • It allows organizations to maintain a reasonable level of activity without overwhelming the system.

These limits are maximums. Avoid generating unnecessary load on the servers, and handle rate-limited responses gracefully. Fintoc continuously monitors and adjusts these rate limits to prevent abuse and accommodate high-traffic scenarios. Fintoc may reduce limits to prevent abuse, or increase limits for integrations that need more than the default limits. To request a higher limit, contact support at least one month before you need it. If you have questions about the rate limits, contact the support team.

​

Handle rate limiting gracefully

To ensure a smooth integration and graceful handling of rate limiting, we recommend implementing the following technique:

• Monitoring for 429 Status Codes and Retry Mechanism:
  Watch for 429 status codes in API responses and implement a retry mechanism when necessary. Use an exponential backoff schedule for retries to reduce request volume. Consider adding randomness to the backoff schedule to prevent a thundering herd effect.

By following these best practices, you can optimize your integration with Fintoc API and ensure a smooth experience while working within the defined rate limits.