Limits
Rate limits are applied per API key, not per IP address.
Rate limit headers
Every API response includes headers showing your current limit status:X-RateLimit-Reset is a Unix timestamp indicating when the window resets.
Handling 429 responses
When you exceed the limit, you’ll receive a429 Too Many Requests response:
Reducing request volume
- Use webhooks instead of polling. Register a webhook endpoint for
order.updatedinstead of pollingGET /orderson a timer. - Batch where possible. If you’re syncing many patients, consider batching imports rather than creating one at a time.
- Cache responses. Resource data that doesn’t change frequently (e.g. product catalog) can be cached locally.

