Rate Limiting

Rate Limiting

Rate limits are divided into 5 second intervals. All endpoints require authentication, so there is no concept of unauthenticated calls and rate limits.



Personal Access Tokens

All personal access tokens are limited to 25 requests / 5 sec. Use the HTTP headers to understand where the application is at for a given rate limit, on the method that was just utilized.

  • x-rate-limit-count: the number of requests accrued in the 5 second window

*Note* When an application exceeds the rate limit for a given standard API endpoint, the API will return a HTTP 429 “Too Many Requests” response code, and the following error will be returned in the response body: 25 requests / 5 sec limit.



OAuth Bearer Tokens

OAuth token rates limits vary by client configuration. As part of the integration process, TempWorks will work with you to set rate limits appropriate for your integration.

Use the HTTP headers in order to understand where the application is at for a given rate limit, on the method that was just utilized.

  • x-rate-limit-count: the number of requests accrued in the 5 second window
  • x-rate-limit-remaining: the number of requests remaining in the current rate limit period
  • x-rate-limit-reset: a timestamp indicating when the current rate limit period ends

*Note* When an application exceeds the rate limit for a given standard API endpoint, the API will return a HTTP 429 “Too Many Requests” response code.