REST API limits by plan
Limits apply per API key. If you generate multiple keys, each active key receives its own minute bucket, while the plan still caps how many keys you can create.
Provider-backed endpoints, such as Google Business Profile health checks, also have daily safeguards because they can call paid data providers. If one of those daily safeguards trips, the response includes
429, the plan limit, and resetAt.
Headers
Every API response includes rate limit headers:Best practices
- Cache responses — snapshots and competitor data don’t change by the minute. Cache for at least 5 minutes.
- Use bulk endpoints —
/exportis one request vs. N individual calls - Implement backoff — on
429, wait forRetry-Afterseconds before retrying - Use webhooks — for real-time events, webhooks are more efficient than polling
/me/alerts