Rate Limiting - by App, or by User?

TonyDowneyTonyDowney Posts: 11Member
It's not entirely clear in the documentation at what level the rate limits are applied.

Is it per app/client ID? Per Account/Access Token?

And are the rate limits shared across all endpoints, or are they per endpoint?

6 comments

  • gregaricangregarican Posts: 82Member ✭
    Based on what I've seen with most API services, it would likely be per Account ID, across any/all concurrent processes. Otherwise you could have a multi-threaded routine all hitting separate API endpoints and hammering things. :smile: Just my best assumption!
  • jamesratcliffejamesratcliffe Posts: 141Administrator, Lightspeed Staff moderator
    @TonyDowney Rate limiting is by API client on each account. That is, each client has its own bucket for each account.

    If your client makes calls on one account, they don't affect its rate limiting on other accounts.

    If other API clients (i.e. other apps) are making calls on an account, this doesn't affect the rate limiting for your client on that account.
    James Ratcliffe
    API Integrations Specialist
    Lightspeed HQ
  • TonyDowneyTonyDowney Posts: 11Member
    Okay, great. Adding onto that...

    Users can have access to multiple accounts, and accounts can have multiple users - just want to make sure when I pair the limits against the account, I'm doing it right. Limits are by account, not by user... correct?
  • jamesratcliffejamesratcliffe Posts: 141Administrator, Lightspeed Staff moderator
    A user can't really have access to multiple accounts. If someone has access to more than one account, they must have multiple users with distinct logins.

    Each client has a bucket for each shop; users and tokens don't come into the equation.
    James Ratcliffe
    API Integrations Specialist
    Lightspeed HQ
  • TonyDowneyTonyDowney Posts: 11Member
    Ah. The documentation mentions "a list of the accounts you have access to." - that's where I got the impression that rate limiting could be by user.
  • gregaricangregarican Posts: 82Member ✭
    This is all great information all the way around. I had wrongly assumed that the limit was against the overall Account ID. If it's per registered API client app then this is helpful. Thanks all!
Sign In or Register to comment.