The limit
The fair-use limit is 600 requests per minute per API key, across all v1 endpoints. Virtually every real integration — Zaps, CRM syncs, order feeds — sits far below this. If you have a workload that genuinely needs more (a large bulk import, a migration), contact us first and we'll make room.
The 429 contract
Requests over the limit may be rejected with HTTP 429 and the error code rate_limited (see API error codes). Build for it now:
- Retry with exponential backoff and jitter; honor a
Retry-Afterheader when present. - Spread bulk work over time instead of bursting — batches of a few requests per second complete comfortably within the limit.
- Retries are safe: issuance, points with
externalRef, and Process Order are idempotent and return the original result rather than double-applying.
Webhooks don't count
Deliveries from Pass Studio to your endpoints (webhooks, Zapier triggers) are outbound and don't consume your request budget. Only calls you make to /api/v1/* count.