"Too many requests" or "Rate limit exceeded"

What you are seeing

The app shows "Too many requests right now - give it a moment and try again." (or, from the API, "Rate limit exceeded. Max N requests per 60s."). It means a safety limit on how fast requests can arrive was hit. Nothing is broken and no data was lost.

The limits

• General app and API use: 100 requests per minute per user (or per network address when not signed in).
• Sign in, "forgot password", reset password and new-workspace sign-up: 10 per minute each.
• Silent session renewal: 30 per minute.
• Public pages that accept submissions (booking, invoice payment, web forms, surveys): 10 submissions per minute per link, with a 40 per minute cap per network address across them. Client organizers allow 30 per minute.
• Failed sign-ins: 10 wrong attempts within 15 minutes lock that email address for 15 minutes ("Too many failed attempts. Please try again later."), whichever device is used.
• Starting a background data export through the API is limited per hour by plan: 3 on Starter, 10 on Growth, 50 on Enterprise.

What to do

• Wait about a minute and try again. Counters reset on a rolling 60-second window.
• For the sign-in lockout, wait 15 minutes, or use "Reset your password" from the login screen if you have forgotten the password.
• If your whole office shares one internet connection and sign-in attempts are being blocked, stagger them or wait a minute.
• Avoid holding down a button or refreshing repeatedly.

If you are using the API

• Responses carry X-RateLimit-Limit and X-RateLimit-Remaining headers, and a Retry-After header when you are limited.
• Back off and retry after the Retry-After number of seconds. Batch work rather than looping rapidly.

If it keeps happening

If you see the message during normal single-person use, tell support the page, the time and what you clicked. A page that loops requests is a bug we want to hear about.