Rate Limits & Credits

Every API key is subject to rate limits and credit-based usage. Understand how limits are enforced and how credits are consumed across endpoints.

Rate Limits

Rate limits are enforced per API key, per minute. Exceeding the limit returns a 429 Too Many Requests response.

Plan	Requests/min	Requests/day
Free	5	100
Starter	30	5,000
Professional	100	25,000
Enterprise	500	Custom

Rate Limit Headers

Every API response includes the following headers so you can track your usage in real time:

X-RateLimit-Limit

Maximum number of requests allowed in the current window.

X-RateLimit-Remaining

Number of requests remaining in the current window.

X-RateLimit-Reset

Unix timestamp (seconds) when the current rate limit window resets.

Handling 429 Responses

When you receive a 429 Too Many Requests response, check the Retry-After header. It contains the number of seconds to wait before making another request. Implement exponential backoff for best results.

Credits

Every API operation costs credits. Credits are deducted from your account balance on each successful request. The cost depends on the endpoint called.

Operation	Credits	Endpoint
Phishing Analysis (Heuristic)	1	/phishing/analyze
Phishing Analysis (AI)	10	/phishing/analyze/ai
DNS Analysis	1	/phishing/dns
IP Blacklist Check	1	/phishing/blacklist
Safe Browsing	2	/phishing/safe-browsing
URL Expand	1	/phishing/url-expand
Exposure Scanner	10	/exposure/scan

Monthly Allowances

Each plan includes a monthly credit allowance that resets on your billing cycle date.

Plan	Monthly Credits	Price
Free	50	$0
Starter	500	$29/mo
Professional	2,500	$99/mo
Enterprise	Unlimited	Custom

Credit Packages

Need more credits? Purchase top-up packages at any time. Top-up credits never expire and stack on top of your monthly allowance.

1,000

credits

5,000

credits

$39

10,000

credits

$69

25,000

credits

$149

Checking Your Balance

Every successful API response includes a meta object with your remaining credit balance, so you can track usage without making a separate call:

{
  "success": true,
  "data": { ... },
  "meta": {
    "credits_remaining": 4832,
    "credits_used": 1,
    "plan": "professional"
  }
}

The credits_remaining field reflects your balance after the current request has been deducted.