Rate limits

Tariq applies rate limits per API key and per IP address. Auth endpoints have a separate, stricter bucket. Responses include standard rate limit headers.

Default limits

BucketLimitWindow
API key120 requests1 minute
IP address600 requests1 minute
Auth (login/signup)20 requests1 minute

Response headers

X-RateLimit-Limit: 120
X-RateLimit-Remaining: 119
X-RateLimit-Reset: 45
Retry-After: 45

429 response

{
  "success": false,
  "error": {
    "code": "RATE_LIMITED",
    "message": "Too many requests.",
    "request_id": "req_abc123"
  }
}

Paid plans may receive higher limits. Contact sales for custom rate limits on Business and Enterprise tiers.