Limits by tier
New-proof, sign-in, and status limits are the same on every plan. API call throughput is where higher plans scale.
When you hit a limit
APIs return 429 Too Many Requests. Honor these response headers before retrying:
CORS exposes
Retry-After, RateLimit, and RateLimit-Policy so browsers and agents can read them.
- Exponential backoff: wait, then double the wait on each retry.
- Creates: confirm the first request failed before sending another. A duplicate proof costs credits.
- Polling: wait a few seconds between polls. Back off on errors.
Tips
- Reuse proofs. Checking an existing proof is free. Creating a new one costs 4 to 73 credits and counts against the verification window, so cache the proof ID and check it.
- Check before you create. Use
gateCheckwith yourgateIdfor access decisions. It reads saved proofs, so you create a new proof only for a missing check. - Need higher limits? Pro raises API throughput four times. Enterprise raises it ten times, by agreement. See Pricing.