Guides
Rate Limits
API rate limiting policies and WebSocket connection limits
Overview
Rate limits protect the system from abuse while allowing legitimate trading activity. There are different limits based on client type and endpoint category.
Client Types
- Market Maker: High-frequency traders with whitelisted IPs, accessing dedicated private endpoints
- Normal User: Standard users accessing public endpoints via website or mobile app
REST API Limits
| Client Type | Scope | Endpoint Category | Average Rate | Peak Rate | Window |
|---|---|---|---|---|---|
| Market Maker | Per Wallet | Create Order | 500 rps | 1000 rps | 10s |
| Market Maker | Per Wallet | Cancel Order | 1000 rps | 2000 rps | 10s |
| All Users | Per IP | Register User | 30 requests | - | 10 min |
Important Notes
- Rate limits are enforced as average requests over time
- Exceeding limits results in HTTP 429 (Too Many Requests) responses
- Average requests per second (rps) are maintained over a 60-second window for order operations
- Peak rates allow burst operations within a 10-second window
- Create Order: All order creation endpoints count towards this limit
- Cancel Order: All order cancellation endpoints count towards this limit
WebSocket Limits
WebSocket connections have the following limits per IP:
| Limit Type | Value |
|---|---|
| New connections | 10 per minute |
| Concurrent connections | 10 max |
Rate Limit Headers
When approaching rate limits, check response headers for:
X-RateLimit-Limit: Maximum requests allowedX-RateLimit-Remaining: Requests remaining in current windowX-RateLimit-Reset: Unix timestamp when the limit resets
Best Practices
- Implement exponential backoff when receiving 429 responses
- Batch operations where possible (e.g., bulk cancel instead of individual cancels)
- Use WebSocket for real-time updates instead of polling REST endpoints
- Cache responses for data that doesn't change frequently (products, assets)
Special Requirements
If you have trading requirements that exceed standard limits, please contact us. Rate limits are designed to prevent abuse, not to limit legitimate usage.
Rate limits are subject to change without prior notice. Monitor your rate limit headers and handle 429 responses gracefully.