Rate Limits

Why do we have rate limits?

Rate limits help ensure stable and fair API usage across all integrations. The current rate limit is 120 requests per 60 seconds. This is a Global Rate Limit, meaning you can perform 120 requests across all endpoints in a 60-second window.

Handling Rate Limits

When you exceed our rate limit, requests will be blocked until the next minute window begins. The API returns a 429 Too Many Requests status code in these cases.

Response Headers

You can monitor your current rate limit status using the following response headers:

• X-RateLimit-Limit - Maximum number of requests allowed per minute
• X-RateLimit-Remaining - Number of requests remaining in the current window
• X-RateLimit-Reset - Time when the rate limit resets (Unix timestamp)

For example:

response = requests.post(url, headers=headers)
print(response.headers)

>>> {'Date': 'Mon, 03 Mar 2025 21:20:33 GMT',
     'Content-Type': 'application/json',
     'Content-Length': '106',
     'Connection': 'keep-alive',
     'x-ratelimit-limit': '120',
     'x-ratelimit-remaining': '119',
     'x-ratelimit-reset': '1741036893',
     'x-request-id': 'da1b77ba-6cec-433b-a0dc-e7ad55d8a28d',
     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'}

In this case, the X-RateLimit-Remaining header tells you that you have 119 requests left before hitting the limit. You can use a site like Epoch Converter to translate the X-RateLimit-Reset timestamp to a human-readable time. For example, 1741036893 corresponds to March 3, 2025, 21:21:33 GMT.

Daily Verification Rate Limiting

To prevent abuse and ensure fair usage, each company is limited to 5 verification attempts per identifier per day.

The limit applies to both individual (POST /verifications) and bulk verification endpoints, and counts all attempts regardless of outcome (success, error, or no data). Once the limit is reached, the API returns a 429 Too Many Requests error.

{
  "error": {
    "code": "daily_verification_limit_exceeded",
    "message": "Try again tomorrow. You have reached the daily verification limit for this identifier.",
    "details": "Maximum 5 verification attempts per identifier per day. Limit resets at midnight UTC."
  }
}

The limit resets automatically at midnight UTC.

Recommended Practices

To work effectively with rate limits when using the Buró de Ingresos API:

• Gracefully handle 429 status codes by retrying after the reset time.
• Space out your requests evenly throughout the time window.
• Avoid unnecessary for loops or bulk requests that could quickly exhaust your rate limit by using Webhooks