Usage limits
- 500 requests per minute (per firmId or partnerId) — a request authenticated with a Firm API token is counted against that Firm’s
firmId. A request authenticated with a Partner API token is counted against the Partner’spartnerId. The two buckets are separate. - 10 concurrent requests (per firmId or partnerId)
Throttling
Requests made beyond the limits mentioned above will result in a429 Too Many Requests response. When this happens, wait at least 60 seconds before retrying; for bursts or migration-style workloads, use exponential backoff (for example retry after 60s, then 120s, capped at a few minutes) so you do not hammer the limiter.
For large backfills, spread work over time or coordinate with support@confidolegal.com if you expect sustained traffic above these limits.
Bulk disbursements
ThedisbursementsCreateBulk mutation runs multiple creates in one request but still counts toward the same per-firm limits and can return 429 if the Firm is already near the cap.