REST API limits to ensure vtiger resources are not abused
This articles will list down the API limits enforced in order to ensure every customer gets a stable environment and shared resources are well protected. To prevent abuse of the API, the number of requests are limited on a per-instance basis. We are setting daily, hourly and minute limit based on the plan you have subscribed.
The daily limits have a rolling expiration of 24 hours. If you exceed the limits, the API will send back response with HTTP Status Code 429.
Note : These limits will come into effect from 1st August 2019.
The plan specific per day, hour and minute level request quotas are below:
|Max Limit||Minute Limit||Hour Limit||Day Limits||Editions|
|4,000||20||100||3,000 + 100 per day per user||Free|
|27,000||30||1,000||3,000 + 200 per day per user||Starter & Exclusive|
|54,000||45||2,000||6,000 + 400 per day per user||Sales/HelpDesk Professional|
|78,000||60||2,500||6,000 + 600 per day per user||All in One Professional|
|1,02,000||75||3,000||6,000 + 800 per day per user||Enterprise|
|1,26,000||90||4,000||6,000 + 1,000 per day per user||Enterprise Plus|
Requests arriving via REST API/Webservices are considered. Mass Retrieve API that retrieves up to 200 records is considered as one request.
All update, create and delete requests are single record requests.
You can make as many API requests but once you exceed the limit, calls will return HTTP status 429.
How do I see my current usage?
Your current rate limit usage is returned in the response headers from each request you make. For example, for the overall api limit is
|HTTP/1.1 200 OK
X-FloodControl-MinuteLimit – The number of requests you are allowed per minute.
X-FloodControl-Remaining – How many requests you can make before hitting the limit.
X-FloodControl-Reset – The next time (Unix timestamp) the minute limit will be updated.
X-RateLimit-DailyLimit – The number of requests you are allowed per day.
X-RateLimit-Remaining – remaining number of requests allowed for the day.
X-RateLimit-Reset– The next time (Unix timestamp) the limit will be updated.
The following media do not use REST API/Webservices and are ignored in regard to the number of API calls: