specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Tink
providerId: tink
created: '2026-05-08'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-08, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-08'
reconciled: false
tags:
  - Open Banking
  - Rate Limiting
description: >-
  Tink's API rate limits are negotiated per contract; sandbox keys are typically capped at
  60 requests per minute. The PSD2 SCA requirement also caps the number of consented account
  refreshes per end user (typically 4 per 24h without SCA). Throttled requests return HTTP 429.
notes: Tink does not publish a public rate-limit table; figures are commercial-contract typical.
sources:
  - https://docs.tink.com/
responseCodes:
  throttled: 429
limits:
  - name: Sandbox per-minute
    scope: client
    metric: requests_per_minute
    limit: 60
  - name: Production per-minute
    scope: client
    metric: requests_per_minute
    limit: -1
    notes: Per contract.
  - name: PSD2 SCA refresh per user
    scope: end_user
    metric: refreshes_per_day
    limit: 4
    notes: Mandated by PSD2; SCA required for 5th and beyond.
policies:
  - name: SCA Compliance
    description: Honor PSD2 SCA cadence; trigger SCA flow when refresh limit is reached.
  - name: Backoff Strategy
    description: Honor 429 Retry-After and apply exponential backoff with jitter.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com