# Are REST API rate limits per user or per application?

**URL:** <https://devforum.zoom.us/t/are-rest-api-rate-limits-per-user-or-per-application/3265>\
**Category:** API and Webhooks\
**Created:** [February 12, 2019, 2:55pm UTC](https://devforum.zoom.us/t/are-rest-api-rate-limits-per-user-or-per-application/3265 "2019-02-12T14:55:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ilya.bogdanov](https://avatars.discourse-cdn.com/v4/letter/i/bb73d2/32.png) [@ilya.bogdanov](https://devforum.zoom.us/u/ilya.bogdanov)\
**Post date:** [February 12, 2019, 2:55pm UTC](https://devforum.zoom.us/t/are-rest-api-rate-limits-per-user-or-per-application/3265/1 "2019-02-12T14:55:39Z")

</div>

Hi, we are developing a marketplace application that will be used by a lot of people. In REST API documentation, it is said that there are limits for the number of normal requests (10/sec.) and a more strict limit on /report calls. The question is, do this limits apply to every application user individually, or the application as a whole. We are using OAuth by the way, so we have different authentication tokens per user.  
If the limit is per-application, can it be extended somehow? And can my app or IP address get banned for making too much requests?  
Another question is am I safe to assume that I will always get status code 429 if the application reaches any of the rate limits (including daily ones)? Or should I parse the response body for error code or something?

---

<div class="post-metadata">

**Author:** ![TimZoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/timzoom/32/978_2.png) [@TimZoom](https://devforum.zoom.us/u/TimZoom)\
**Post date:** [February 12, 2019, 6:35pm UTC](https://devforum.zoom.us/t/are-rest-api-rate-limits-per-user-or-per-application/3265/2 "2019-02-12T18:35:52Z")

</div>

Right now it is actually on a per account basis. We are looking into changing this but for now it is at the account level.

Yes, you should get a 429 when you hit the limit.

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 6:10pm UTC](https://devforum.zoom.us/t/are-rest-api-rate-limits-per-user-or-per-application/3265/3 "2020-08-21T18:10:53Z")

</div>

Closed on August 21, 2020, 6:10pm UTC


