Skip to main content
Sohar applies rate limits per customer account across authenticated API requests. Limits use a token bucket, which allows short bursts while enforcing a sustained request rate. Standard accounts can make 10 requests per second, with a burst capacity of 20 requests. Custom rate limits are applied to Enterprise accounts. If you exceed a rate limit, Sohar returns 429 Too Many Requests:

​
Handling Rate Limits

Retry rate-limited requests with exponential backoff and jitter. Sohar does not currently return a Retry-After header, so your integration should increase the delay between consecutive attempts. When retrying a supported create request, reuse its idempotency key to avoid creating a duplicate resource.