Cloudflare’s API now supports rate limiting headers using the pattern developed by the IETF draft on rate limiting. This allows API consumers to know how many more calls are left until the rate limit is reached, as well as how long you will need to wait until more capacity is available.
Our SDKs automatically work with these new headers, backing off when rate limits are approached. There is no action required for users of the latest Cloudflare SDKs to take advantage of this.
As always, if you need any help with rate limits, please contact Support.
Changes
New Headers
Headers that are always returned:
- X-RateLimit-Limit: Total Number of requests the caller can make
- X-RateLimit-Remaining: Number of requests before Rate Limit kicks in
Returned only when a rate limit has been reached (error code: 429):
- Retry-After: Number of Seconds until more capacity is available, rounded up
- X-RateLimit-Reset: RFC 1123 Formatted Date as to when more capacity is available
SDK Back offs
- All SDKs will automatically respond to the headers, instituting a backoff when limits are approached.
GraphQL and Edge APIs
These new headers and back offs are only available for Cloudflare REST APIs, and will not affect GraphQL.
For more information
Source: Cloudflare
Latest Posts
- Amazon S3 now supports attribute-based access control

- App-only certificate-based authentication now available in SharePoint Online Management Shell [MC1188595]
![App-only certificate-based authentication now available in SharePoint Online Management Shell [MC1188595] 3 pexels bess hamiti 83687 36487](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Updates available for Microsoft 365 Apps for Current Channel [MC1188610]
![Updates available for Microsoft 365 Apps for Current Channel [MC1188610] 4 pexels steve 14003554](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Microsoft 365: Modern Access Request and Access Denied web page [MC1188599]
![Microsoft 365: Modern Access Request and Access Denied web page [MC1188599] 5 pexels cottonbro 7429474](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)


![App-only certificate-based authentication now available in SharePoint Online Management Shell [MC1188595] 3 pexels bess hamiti 83687 36487](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-bess-hamiti-83687-36487-150x150.webp)
![Updates available for Microsoft 365 Apps for Current Channel [MC1188610] 4 pexels steve 14003554](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-steve-14003554-150x150.webp)
![Microsoft 365: Modern Access Request and Access Denied web page [MC1188599] 5 pexels cottonbro 7429474](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-cottonbro-7429474-150x150.webp)
![(Updated) Additional document processing rule actions for Microsoft SharePoint libraries [MC1137601] 7 (Updated) Additional document processing rule actions for Microsoft SharePoint libraries [MC1137601]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-scottwebb-1029612-150x150.webp)