Rate limits and request limits
| Limit | Value |
|---|---|
Per source IP, every /v1/* path | 240 requests a minute |
Per credential, /v1/integrations/* and /v1/modules/* together | 240 requests a minute (one bucket per key) |
Request body, POST /v1/integrations/orders and .../orders/validate | at most 15728643 bytes (the signed artifact plus the order) |
| Request body, every other partner route | at most 1048576 bytes |
| Request signature window | 300 seconds either side of TrueRoute's clock |
| Idempotency-Key length | at most 255 characters (use a UUID) |
A 429 is rate_limited with Retry-After: wait that many seconds and retry with the same Idempotency-Key and bytes.
A body over its limit is refused before it is read: 413 request_too_large. Nothing was executed; do not resend the same bytes.