## Rate Limits

WHMCS rate limits the following endpoints and returns HTTP status code `429` if you exceed 30 requests to that endpoint in five minutes:

- [`POST /user/invoices/{invoice_id}/payment-link`](/rest-api/reference/whmcs-rest-api/paths/~1user~1invoices~1%7Binvoice_id%7D~1payment-link/post)
- [`POST /user/invoices/{invoice_id}/payment-session`](/rest-api/reference/whmcs-rest-api/paths/~1user~1invoices~1%7Binvoice_id%7D~1payment-session/post)
- [`POST /user/invoices/{invoice_id}/payment-session/confirm`](/rest-api/reference/whmcs-rest-api/paths/~1user~1invoices~1%7Binvoice_id%7D~1payment-session~1confirm/post)
- [`DELETE /user/paymethods/{paymethod_id}`](/rest-api/reference/whmcs-rest-api/paths/~1user~1paymethods~1%7Bpaymethod_id%7D/delete)


WHMCS does **not** rate limit other API endpoints.

The API limits endpoints using the client IP address and route, not the client or user ID. A server-side integration that acts for many clients shares a single allowance per route.

Info
These limits apply to every integration that calls these endpoints. For more information, see the [API Reference](/rest-api/reference/whmcs-rest-api).

## Reading a 429

A request past the limit returns the following response:

```
HTTP/1.1 429 Too Many Requests

{"message":"Rate Limit Exceeded"}
```

The response includes no `Retry-After` header and no `X-RateLimit-*` headers. Ensure that your application spaces requests appropriately.