Security & limits

This page lists the limits your integration should handle cleanly.

Rate limits (429)

If you send requests too fast, you may get 429 Too Many Requests.

Client behavior:

• Back off (wait, then retry)
• Avoid tight loops
• Queue/batch if you send at scale

PAYG window limits (429)

If you configured a PAYG message cap for a token in a specific date window, sendMessage can return 429 when the window is active and the limit is reached.

IP allowlist (403)

If you enabled IP allowlist for a token, requests from other IPs return 403 Forbidden.

Token disabled (401)

If a token is disabled/inactive, requests return 401.

Next Errors & troubleshooting