Rate limits
Get started
Per key, per second, with a burst allowance. The check endpoint is sized to be called before every action — that is the point of it, so it is not the one we throttle first.
Scope Limit Burst Note
Headers on every response
Response headers
Sidaxis-RateLimit-Limit: 1000 Sidaxis-RateLimit-Remaining: 947 Sidaxis-RateLimit-Reset: 1 # on 429 only Retry-After: 2A 429 carries rate_limited . Back off for Retry-After , then retry with the same Idempotency-Key — the replay returns the original response and consumes nothing twice. Exponential backoff with jitter; a tight retry loop is how a burst becomes an outage.
The public check has no account limit GET /receipts/{id}/verify takes no key, so there is no account to meter. A fair-use ceiling applies per IP to keep it available; a throttled IP never means a throttled account. Independent verification that we could rate-limit per customer would not be independent.
Raising a limit
Limits are per key, so splitting traffic across keys per tool is usually the answer before asking us. Sandbox limits are lower on purpose — do not size a launch against them. For a genuine step change, send the expected peak per second and the window, and we raise it on the account.
See also Idempotency → Errors & refusals →
| Scope | Limit | Burst | Note |
|---|---|---|---|
| POST /mandates/{id}/check | 1,000 req/s per key | 2,000 | The hot path. Built to be called before every action. |
| POST /identity/recognitions | 200 req/s per key | 400 | Free at any volume; the limit is throughput, not cost. |
| POST /identity/claims | 50 req/s per key | 100 | Claims are once per person, so bursts are rare and suspicious. |
| POST /sessions | 100 req/s per key | 200 | One session per person per flow. Reuse nothing. |
| All GET endpoints | 300 req/s per key | 600 | Reads are never billed, but they are still metered. |
| Every key on the workspace | 3,000 req/s per workspace | 5,000 | The account ceiling. Splitting across keys raises per-key headroom, not this. |
| GET /receipts/{id}/verify | No account limit | Fair use per IP | Public and free. There is no account to limit; abusive IPs are throttled, never accounts. |