Rate limits

​

Limits by plan

• API requests count every call made with an API token (zipp_) or an OAuth token against the organization’s budget. Using the Zippendo app does not count.
• Checkout rate requests are counted per order channel, so one busy webshop never slows down another.
• Order pushes to a custom channel’s ingest URL count only when they are correctly signed. ping deliveries are free. On a 429, retry after the delay given: sending the same order again is safe.
• Order updates that Shopify and WooCommerce send to Zippendo have no plan limit.
• MCP: tool calls your AI agent makes through the MCP server don’t count against the API budget. The connector URL has its own limit of 300 requests per minute per IP address.
• On top of the plan limits, other requests from one IP address, such as the Zippendo app’s, share a separate ceiling, and sign-in and sign-up have stricter limits. These protect Zippendo against abuse. API-token requests from one server can use your plan’s full budget. If you get 429s while you are below your plan’s budget, contact support.

​

Handling 429s

const response = await fetch(url, options)
if (response.status === 429) {
  const seconds = Number(response.headers.get("retry-after") ?? "60")
  await new Promise((resolve) => setTimeout(resolve, seconds * 1000))
  // …retry the request
}