Skip to content
WhiteBeard

Rate Limiting

Depending on their use case, some requests to the API may be rate limited to protect them from abuse. This is unrelated to the general rate limits that may apply to your plan.

Enabling Rate Limiting

Section titled “Enabling Rate Limiting”

To enable rate limiting, go to Administration -> Publisher Configuration -> System. In the API section, enable rate limiting.

Forwarding the User’s Real IP

Section titled “Forwarding the User’s Real IP”

If your application makes requests on behalf of a user rather than acting as the client itself — for example, a website’s frontend proxying calls through your own backend — make sure to send the user’s originating IP address with all requests. This allows our rate limiting to correctly apply per end-user instead of per-server.

Recommended: Send a X-Real-IP header with all POST requests, set to the user’s originating IP address.

If you are using a frontend that is not hosted via Cloudflare Workers, make sure to set your API client to private so that we can accept your X-Real-IP header.