Skip to main content
The Kit API limits the number of requests that each credential can send in a 60 second window.

Limits

The limit applies to each credential, not to each account or IP address. For more about the two authentication methods, see API authentication. The Kit MCP has a separate limit of 120 requests in 60 seconds for each access token.

The 429 response

When a credential sends more requests than its limit, the API returns a 429 status code. The response body is the plain text Retry later, not JSON. The response does not include a Retry-After header.

Handle a 429 response

  1. Stop sending requests with that credential.
  2. Wait before you send the next request. A wait of up to 60 seconds resets the limit.
  3. If you get another 429 response, increase the wait time. Use exponential backoff.

Send fewer requests

  • Use the bulk endpoints to create or update many records in one request. The bulk endpoints need OAuth.
  • Use pagination with the largest page size that you need, instead of many small pages.
  • Use webhooks to get changes from Kit, instead of polling the API.