Rate Limits

CertiLayer enforces two independent limits on /v1/ingest: a per-key requests-per-minute cap (abuse protection) and a per-org monthly session quota (billing enforcement). Both are checked on every request.

Requests per minute (abuse protection)

Monthly session quota (billing)

Handling a 429

const res = await fetch('https://api.certilayer.net/v1/ingest', { ... })

if (res.status === 429) {
  const body = await res.json()
  const retryAfter = body.retry_after_seconds ?? 5
  await new Promise(r => setTimeout(r, retryAfter * 1000))
  // retry
}