Limits are calculated on a rolling 60-second window per API key. Workspace-level burst allowances of 2× the standard limit are available for up to 10 seconds.
When a rate limit is exceeded, the API returns HTTP 429 Too Many Requests. The Retry-After header indicates how many seconds to wait before retrying.
{ "error": { "code": "RATE_LIMIT_EXCEEDED", "message": "You have exceeded the request limit for this endpoint. Please retry after 14 seconds.", "retry_after": 14 }}
Implement exponential backoff with jitter in your client:
Each of the six apps may apply additional limits on specific high-throughput endpoints, such as real-time collaboration events in Office or bulk import operations in Sales. Consult the relevant API reference page for per-endpoint details.