Skip to main content
POST
POST /limit
Content-Type must be application/json. application/json; charset=utf-8 is fine. If Limitem is down, a 200 can still come back with degraded: true — that’s fail-open.

Authorizations

Authorization
string
header
required

Contiguity token. Authorization: Bearer limitem_sk_...

Body

application/json
namespace
string
required

Namespace for the limit.

Required string length: 1 - 256
Example:

"contiguity-api"

identifier
string
required

Who you're limiting.

Required string length: 1 - 512
Example:

"user:123"

limit
number
required

Requests allowed in the window.

Required range: 1 <= x <= 1000000
Example:

100

duration
number
required

Window length in seconds. 131536000 (one year).

Required range: 1 <= x <= 31536000
Example:

3600

product
string

Optional product. Slugified and appended as namespace.product.

Required string length: 1 - 128
Example:

"outbound_sms"

algorithm
enum<string>
default:fixed-window

Rate limiting algorithm.

Available options:
fixed-window,
sliding-window,
token-bucket,
leaky-bucket
Example:

"fixed-window"

Response

Request allowed

id
string
required
Example:

"req_xxxxxxxxxxxxxxxx"

timestamp
number
required
Example:

1705320000000

api_version
string
required
Example:

"v2026.8.23"

object
string
required
Example:

"rate_limit"

data
object
required