Skip to main content

EASM API Rate Limits

Rate limits throttle the number of API calls you can make. All endpoints within the EASM API are subject to a rate limit of 1,000 calls per second, per tenant.

EASM sends Rate Limit headers in API responses to provide information about the current status of rate limits. Users can use the Rate Limit headers to plan ahead for their API integration to prevent reaching the rate limit and receiving an HTTP 429 response code.

The Rate Limit headers are:

  • x-ratelimit-limit: The rate limit ceiling that is applicable for the current API request.
  • x-ratelimit-remaining: The number of API requests remaining for the current rate limit window.
  • x-ratelimit-reset: The time (in seconds) remaining in the current window after which the rate limit resets.