API Throughput Limits | Cashfree Payments

To maintain service reliability, protect against abuse, and ensure consistent quality of service for all users, the following rate limits apply to the APIs. All Secure ID verification APIs are subject to rate limits measured in transactions per minute (TPM). These limits apply per merchant account and are categorised based on resource requirements and typical usage patterns of each API.

Standard

100 TPM: Verification APIs that require real-time processing and external data validation

Medium

200 TPM: Lightweight verification services with faster processing capabilities

Restricted

5 TPM: Resource-intensive bulk operations that require significant processing time

Rate limits

Standard (100 TPM)
Medium (200 TPM)
Restricted (5 TPM)

Standard rate limit: 100 transactions per minuteSecure ID APIs that require real-time processing and external data validation.

API	Description
Aadhaar Masking	Masks sensitive Aadhaar information
Bank Account Verification Async V2	Asynchronous bank account validation
Bank Account Verification Sync V2	Synchronous bank account validation
Create Auth Token	Creates authentication token for Video KYC
Create E-Sign Request	Initiates electronic signature process
Create User for Secure ID Suite	Creates user profile for Video KYC
Data Availability	Checks data availability for verification
Deactivate Static KYC Link	Deactivates static KYC verification link
Driving Licence	Validates driving licence information
Employee Details	Retrieves employment verification data
Face Match	Compares facial biometric data
Fetch Financial Information	Retrieves financial account information
Fetch GSTIN with PAN	Retrieves GST numbers linked to PAN
Fetch User Details From Access Token	Retrieves user details using access token
Generate Static KYC Link	Generates static KYC verification link
Geocoding	Converts address to geographical coordinates
Get BAV Status V2	Retrieves bank account verification status
Get Consent Status	Checks consent status for data access
Get E-Sign Status	Checks electronic signature status
Get Status for Verify PAN in Bulk	Retrieves bulk PAN verification status
Get Status of Aadhaar Verification via OCR	Checks OCR-based Aadhaar verification
Get Status of PAN Verification via Smart OCR	Checks OCR-based PAN verification
Get Status of Verify PAN Sync	Checks synchronous PAN verification status
Get Video KYC Status	Gets Video KYC session status
IFSC Verification V2	Validates IFSC codes and retrieves bank branch details
Initiate Video KYC Request	Starts Video KYC verification process
Mobile 360 Send OTP Request	Sends OTP for mobile verification
Mobile 360 Verify OTP	Verifies OTP for mobile authentication
Name Match	Compares name variations and matches
PAN 360	Comprehensive PAN details and validation
Initiate OAuth	Initiates OAuth authentication process
OAuth Access Token Generation	Generates OAuth access token
Passport	Validates passport information
Request Consent	Requests user consent for data access
Request Financial Information	Requests access to financial data
Reverse Geocoding	Converts coordinates to address information
Smart OCR	Optical character recognition for documents
Upload Document For E-Sign	Uploads documents for electronic signing
Vehicle RC	Retrieves vehicle registration details
Verify CIN	Validates Corporate Identity Numbers
Verify GSTIN	Validates GST identification numbers
Voter ID	Validates voter identification cards
UPI Penny Drop	Validates bank account via one rupee UPI transaction to VPA

Medium rate limit: 200 transactions per minuteLightweight verification services with faster processing capabilities.

API	Description
Create DigiLocker URL	Creates DigiLocker integration link
Create Reverse Penny Drop Request	Initiates reverse penny drop verification
Generate KYC Link	Generates KYC verification link
Get DigiLocker Verification Status	Checks DigiLocker document verification
Get Document from DigiLocker	Retrieves documents from DigiLocker
Get KYC Link Status	Gets KYC link verification status
Get Reverse Penny Drop Request Details	Retrieves reverse penny drop status
IP	Validates IP address information
Verify PAN Sync	Synchronous PAN verification

Restricted rate limit: 5 transactions per minuteResource-intensive bulk operations that require significant processing time.

API	Description
Verify PAN in Bulk	Processes multiple PAN verifications simultaneously

Rate limit error handling

When you exceed the rate limit for any API, the system returns an HTTP 429 status code.

Error Response Structure

The following response structure is returned when rate limits are exceeded:

{
  "type": "invalid_request_error",
  "code": "rate_limit_exceeded",
  "message": "Too many requests",
  "details": [
    {
      "field": "rate_limit",
      "issue": "Rate limit exceeded for this endpoint"
    }
  ]
}

Best practices for rate limit management

Use these guidelines to optimise your API usage and avoid rate limit errors.

Implement exponential backoff

When you receive a 429 response, implement retry logic with exponential backoff:

async function makeAPIRequest(url, options, maxRetries = 3) {
  for (let attempt = 1; attempt <= maxRetries; attempt++) {
    try {
      const response = await fetch(url, options);
      
      if (response.status === 429) {
        const retryAfter = response.headers.get('retry-after');
        const delay = retryAfter ? parseInt(retryAfter) * 1000 : Math.pow(2, attempt) * 1000;
        
        console.log(`Rate limit exceeded. Retrying after ${delay}ms`);
        await new Promise(resolve => setTimeout(resolve, delay));
        continue;
      }
      
      return response;
    } catch (error) {
      if (attempt === maxRetries) throw error;
    }
  }
}

Monitor rate limit headers

Check the rate limit headers in successful responses to proactively manage your request timing:

const response = await fetch('/api/verify-gstin', options);

const remaining = response.headers.get('X-RateLimit-Remaining');
const resetTime = response.headers.get('X-RateLimit-Reset');

if (parseInt(remaining) < 10) {
  console.log('Approaching rate limit. Consider slowing down requests.');
}

Distribute requests evenly

Avoid sending bursts of requests at the beginning of each minute. Instead, distribute your requests evenly throughout the time window.Example strategy:

For 100 TPM limit: Send 1 request every ~600ms
For 200 TPM limit: Send 1 request every ~300ms
For 5 TPM limit: Send 1 request every ~12 seconds

Requesting rate limit increases

If your application requires higher rate limits, you can submit a request through the support form or contact your account manager directly. When you submit your request, include the following information:

Your merchant ID
Current usage patterns and volumes
Expected future usage requirements
Business justification for the increase

Your account manager can provide faster processing and personalised assistance for rate limit increase requests.

Secure ID APIs

V2

V1 (Depricated API's)

API Rate Limits

Standard

Medium

Restricted

Rate limits

Rate limit error handling

Best practices for rate limit management

Requesting rate limit increases

Standard

Medium

Restricted

​Rate limits

​Rate limit error handling

​Best practices for rate limit management

​Requesting rate limit increases

Rate limits

Rate limit error handling

Best practices for rate limit management

Requesting rate limit increases