IPRout

Rate Limits and HTTP 429

IPRout returns HTTP 429 when a request cannot proceed because the shared monthly allowance or an individual key cap has been reached. Check GET /usage to distinguish remaining account capacity from key-level capacity, and avoid aggressive retries until the relevant limit resets or changes.

Last updated September 12, 2026

Why did I receive HTTP 429?

A 429 can indicate an exhausted monthly plan allowance or a key-specific cap that is lower than the shared allowance.

How do I diagnose the limit?

Call /usage with the affected key and compare total, remaining, and per-key request counts.

curl -H "Authorization: Bearer YOUR_API_KEY" https://api.iprout.com/usage

How should clients react?

Stop automatic retries, preserve the error for monitoring, and adjust traffic or plan capacity deliberately.

  • Use per-key caps to contain one integration
  • Alert before remaining capacity reaches zero
  • Do not treat 429 as a transient 500

How should HTTP 429 capacity handling be implemented?

Treat 429 as unavailable capacity rather than a transient server error. Stop automatic retries, read /usage, and distinguish a Pro key cap from exhaustion of the shared monthly account allowance. Keep this responsibility close to the IPRout client so the behavior documented in Rate Limits and HTTP 429 remains consistent across web requests, workers, and scheduled jobs.

How should HTTP 429 capacity handling be verified?

Test application behavior with fixtures for key remaining capacity at zero and account remaining capacity at zero. Both should preserve the primary workflow's intended fallback without a retry loop. Automate the stable cases and reserve live checks for controlled environments so verification is repeatable without consuming unnecessary production allowance.

How should HTTP 429 capacity handling be operated?

Alert before critical workloads approach either boundary and attribute consumption through named keys. Include staging, scheduled jobs, and direct browser integrations when forecasting the shared monthly total. Write down the owner and expected behavior so an alert or product change can be handled without reconstructing the original integration decisions.

Where does HTTP 429 capacity handling stop?

A per-key cap contains one credential's consumption but does not reserve requests for other keys. All successful lookups still draw from one account allowance until the monthly reset. Treat that limit as part of the feature contract and direct callers to the related guide when they need a different guarantee or control.

What belongs in the release review for HTTP 429 capacity handling?

Review the deployed implementation of Rate Limits and HTTP 429, not only a local sample. Confirm the intended endpoint, credential source, timeout, response model, and fallback from the environment that will carry real traffic. Use the verification cases above as release evidence, inspect generated browser assets and logs for secret exposure, and make sure dashboards identify the workload without storing raw credentials or unnecessary IP data. Record the configuration owner and rollback action before enabling the feature broadly.

When should HTTP 429 capacity handling be revisited?

Revisit HTTP 429 capacity handling when traffic volume, plan capacity, application ownership, deployment regions, browser origins, data retention, or the product consequence of a lookup changes. Compare the current implementation with the documented operating boundary rather than assuming the original decision still fits. Update tests and internal runbooks together, then verify the public API contract and related IPRout guides before rolling the change across every service that shares the client or account.

External references

Continue with the standards and official documentation most relevant to this guide.

Continue building with IPRout

Test the API, browse runnable examples, or return to the documentation directory.