Rate limits

How many requests a minute each endpoint takes, and who is counted.

Over a limit you get HTTP 429 with E1002, and nothing happens: no charge, no order. Wait for the minute to roll over and retry. /me returns this same table as rateLimits.

EndpointsLimitCounted per
/cs2 /rust /extra120 a minuteIP address. Counted before the key is looked up, so guessing keys is throttled too.
/cs2 /rust /extra30 a minuteAccount (all keys together). Shared by every key on the account, across all three buy endpoints.
/products60 a minuteIP address
/stock60 a minuteIP address
/balance120 a minuteIP address
/limits120 a minuteIP address
/order120 a minuteIP address
/replace60 a minuteIP address
/replace20 a minuteKey
/preorder/hours /preorder/cancel60 a minuteIP address
/preorder/hours /preorder/cancel20 a minuteAccount (all keys together). Shared by every key on the account, across both pre-order endpoints.
/me120 a minuteIP address
/orders60 a minuteIP address
/ledger60 a minuteIP address
/orders30 a minuteAccount (all keys together)
/ledger30 a minuteAccount (all keys together)
/webhooks /webhooks/{id} /webhooks/{id}/rotate /webhooks/{id}/enable /webhooks/{id}/test /webhooks/{id}/deliveries120 a minuteIP address
/webhooks /webhooks/{id} /webhooks/{id}/rotate /webhooks/{id}/enable /webhooks/{id}/test20 a minuteAccount (all keys together). Changes only: creating, deleting, rotating, enabling and testing endpoints.
/webhooks/{id}/test6 a minuteAccount (all keys together). On top of the limit on changes.

Buys are counted per account, not per key: five keys on one account still share one allowance. E1707 is something else: the purchases-per-hour limit you set yourself under API protection.

Errors

CodeHTTPMeaning
E1002429Too many requests. Wait for the minute to roll over and retry. See Rate limits.
E1707429You reached your purchases-per-hour limit.
Rate limits · API reference · nfa.pub