Copy page

Overview

Rate Limits

If you exceed the rate limit, the API returns 429 Too Many Requests.

Rate Limit Headers

Each API response includes rate limit headers:

• X-RateLimit-Limit: Total requests allowed in the current window (example: 15)
• X-RateLimit-Remaining: Requests left in the current window (example: 14)
• X-RateLimit-Reset: Seconds until the limit resets (example: 1)

If X-RateLimit-Remaining reaches 0, the next request returns 429 Too Many Requests until the reset window expires.

Handle 429 Responses

When you receive a 429, wait for the number of seconds in X-RateLimit-Reset before retrying.

Code
curl -i -X GET "https://api.tomba.io/v1/domain-search?domain=example.com" \
    -H "X-Tomba-Key: your_api_key" \
    -H "X-Tomba-Secret: your_secret_key"

In JavaScript, you can apply a simple retry based on the reset header:

Code
const request = async () => {
    const res = await fetch("https://api.tomba.io/v1/domain-search?domain=example.com", {
        headers: {
            "X-Tomba-Key": "your_api_key",
            "X-Tomba-Secret": "your_secret_key",
        },
    });

    if (res.status === 429) {
        const wait = Number(res.headers.get("X-RateLimit-Reset") || 1);
        await new Promise((resolve) => setTimeout(resolve, wait * 1000));
        return request();
    }

    return res.json();
};

Overview of Request Costs

Tool	Request Cost
Domain Search	Counted 1 for up to 10 Emails
Email Finder	Counted as 1 for 1 Email
Author Finder	Counted as 1 for 1 Email or article person name
Email & Domain Enrichment	Counted as 1 for 1 Email
LinkedIn Email Finder	Counted as 1 for 1 Email
Email Verification	Counted as 1 for 1 Email
Phone Finder	Counted as 10 for up to 10 Phones
Phone Validate	Counted as 1 for 1 Phone
Reveal search	Counted as 1 for 50 companies

Overview of Bulk Limits and Concurrency

The following table outlines the daily bulk limits and maximum concurrent operations allowed per tool. Staying within these limits ensures optimal performance and resource utilization.

Tool	Limit	Max Concurrent Jobs
Bulks Domain Search	15/day	2
Bulk Email Finder	15/day	2
Bulk Author Finder	15/day	2
Bulk Email Enrichment	15/day	2
Bulk Linkedin Finder	15/day	2
Bulk Email Verifier	15/day	2
Bulks Phone Finder	15/day	2
Bulks Phone Validate	15/day	2
Bulks Company Enrichment	15/day	2
Bulks Similar	15/day	2
Domain export	15/day	2
Reveal search export	15/day	2

Additional Notes

• When a Domain Search or an Email Finder request doesn't return a result, the request isn't counted. Similarly, for the Email Verifier: if you verify a webmail and no result is provided, the request will not be used.
• Unique requests are counted only once every 30 days against your quota. If you need to re-run a series of requests due to improper data storage or for any other reason, these will not count against your monthly quota. Consequently, you can make identical API requests repeatedly within the same billing period. This flexibility is especially beneficial for developers who are testing integrations.
• ⚠️ All limits are shared across your team members. Please respect these limits. If you need higher limits for an integration app, contact us to discuss options.

Is There a Request Per Second Limit?

Yes. The following limits apply per endpoint.

Request Rate Limits

API Endpoint	Rate Limit (per second)	Rate Limit (per minute)
Domain Search	15	900
Email Finder	15	900
Similar	15	900
Technology	15	900
Enrichment	5	300
Author Finder	2.5	150
Email Verifier	2.5	150
LinkedIn Email Finder	1.67	100
Reveal search	5	300