Rate limiting

To maintain API stability, we've implemented rate limiting controls. When users exceed the allowed request threshold, they'll receive a 403 - Forbidden error.

Rate limits apply uniformly across all Kiteworks API endpoints and are based on the number of requests from each IP address within a given timeframe.

Current rate limits are:

  • Standard customers: 30 API requests per second per IP address. Additionally, the system can queue up to 40 requests before rejecting further calls.

  • MFT application users: 300 requests per second per IP address (increased due to the high-volume requirements of managed file transfer operations).