Rate Limiting

Unlike the Admin API, which meters requests per authenticated shop, the Storefront API applies a rate limit per buyer IP address.

When a request is made, it is added to the bucket. If the bucket is full, the API responds with a 429 Too Many Requests status.

Bucket capacity and leak rate are subject to change. Read the current values from the response headers rather than hard-coding them.