Quotas

The /v1/quotas endpoint shows three things:

1. The base tier limits (Free / Pro / Pro+API / Enterprise) — what your subscription buys.
2. Any per-store overrides support has set (custom deals, partner integrations).
3. The effective limits — overrides win, falling back to tier defaults.

GET /v1/quotas

Auth: platform key with usage:read.

Request

curl https://api.dzbuild.app/v1/quotas \
  -H "Authorization: Bearer $DZ_KEY"

Response 200

{
  "data": {
    "tier": "pro_plus",
    "tier_limits": {
      "requests_per_month":  5000000,
      "signups_per_month":   50000,
      "webhooks_per_month":  500000,
      "requests_per_minute": 1200
    },
    "overrides": null,
    "effective": {
      "requests_per_month":  5000000,
      "signups_per_month":   50000,
      "webhooks_per_month":  500000,
      "requests_per_minute": 1200
    }
  }
}

When an override is in place:

{
  "data": {
    "tier": "pro",
    "tier_limits": {
      "requests_per_month":  500000,
      "signups_per_month":   5000,
      "webhooks_per_month":  50000,
      "requests_per_minute": 300
    },
    "overrides": {
      "requests_per_month":  2000000,    // override
      "signups_per_month":   null,       // not overridden, falls back to tier
      "webhooks_per_month":  null,
      "requests_per_minute": 600,        // override
      "notes": "Partner integration — Q2 2026"
    },
    "effective": {
      "requests_per_month":  2000000,    // from override
      "signups_per_month":   5000,       // from tier
      "webhooks_per_month":  50000,
      "requests_per_minute": 600
    }
  }
}

When you'd want an override

• Seasonal spike without upgrading the whole month (Aïd, Black Friday).
• Partner integration — a Zapier-like service connects on your behalf and needs higher RPS than your tier.
• Custom contract — Enterprise deals.

Contact support with your store id to set one up. Overrides are merchant-friendly: they only raise ceilings, never lower them.

-1 = unlimited

Any field set to -1 means no limit. Enterprise tier defaults all four fields to -1. There's still a hard requests_per_minute cap to protect the platform — 6000 for enterprise unless a higher rate is contractually agreed.

When you'd hit a quota

• Per-minute burst → 429 with Retry-After.
• Monthly request quota → 402 quota_exceeded until the 1st of next month.
• Signup quota → same 402 shape, but only blocks /v1/signups. Other endpoints keep working.
• Webhook delivery quota → outbound webhooks pause until reset; inbound API works normally.

See Errors and Rate limits for retry strategies.