Quickstart: handle rate limits on the public API

Read the headers

Every response carries the current budget so you can slow down before you are cut off:

• RateLimit-Limit — requests allowed per window.
• RateLimit-Remaining — how many you have left.
• RateLimit-Reset — seconds until the window resets.

Back off on 429

async function withRetry(fn, max = 4) {
  for (let attempt = 0; ; attempt++) {
    const res = await fn();
    if (res.status !== 429) return res;
    if (attempt >= max) return res;
    const reset = Number(res.headers.get('RateLimit-Reset')) || 2 ** attempt;
    const jitter = Math.random() * 250;
    await new Promise(r => setTimeout(r, reset * 1000 + jitter));
  }
}

Honour RateLimit-Reset when present; fall back to exponential back-off (2**attempt seconds) otherwise, always with a little jitter so many clients don't retry in lockstep.

Stay under the limit

Cache reference data (products, pricing, loyalty tiers), batch where you can, and never poll healthz or status in a tight loop. Most integrations never see a 429 once caching is in place.