Limits
Updated:
Requests are limited per IP, per order and per wallet. Windows are fixed: a calendar minute, hour or day in UTC. When a limit is exceeded, the response is 429 rate_limited with Retry-After until the end of the window.
Request limits
Requests | Limit |
|---|---|
| 30 per minute per IP; for |
Any request with | 60 per minute per IP |
Paid orders | 10 per hour and 30 per day per wallet |
Paid renewals and traffic | Within the same 10 per hour per wallet as orders |
Paid top-ups | 5 per hour and 20 per day per wallet |
Order requests: | 30 per minute per order |
Order requests, | 120 per minute per IP |
| 10 per hour per address and IP, 60 per hour per IP |
Wallet limits are counted only after the payment signature is checked: requests with someone else's address do not use up your limits. A repeat of the same signed request after a wallet limit returns the same 429: sign a new authorization later.
GET /catalog and GET /openapi.json are not limited.
Size limits
What | Limit |
|---|---|
Request body | 64 KiB |
| 65,536 characters; decoded JSON up to 32 KiB, nesting up to 16 |
Lines in an order | 20 |
Quantity per line | Dedicated and 100% Uptime — up to 1000; MOBILE — up to 20; MIX — one of the package sizes |
MIX country parts per order | 40 |
| One public IPv4 address |
| 2048 characters |
| 16–128 characters |
Events per page | 200 |
Orders per page in recovery | 200 (50 by default); top-ups — the latest 20 |
IP replacement | 1–100 addresses per request, reason 3–200 characters |
Addresses in a renewal | 1000 |
Top-up | 5.00–5000.00 USD |
Withdrawal | From 1.00 USD, one open request per wallet |
Quote lifetime | 15 minutes |
Authorization validity ( | From now + 60 seconds to now + 1800 seconds |
Challenge lifetime | 5 minutes |