Endpoint
Tightknit’s REST API endpoint is:Authentication
API keys
To understand how to create and manage your API keys, see API Keys. To authenticate your requests, you need to pass the API key with header:Authorization: <YOUR_API_KEY>
Plan Requirements
Some endpoints require a higher plan than the API itself. Endpoints with plan restrictions note the minimum required plan in their description. If you call a plan-restricted endpoint without the required plan, the API returns403 Forbidden.
Rate Limits
When authenticated using developer API keys, requests may not exceed 50 requests per second across all APIs.Search rate limits
Search endpoints have additional per-caller rate limits:
Requests that exceed these limits receive a
429 Too Many Requests response.
Abuse protection
A separate ceiling applies per source IP address, before your API key is validated. It exists to bound credential brute-force attempts, and it sits well above the published 50 requests per second, so normal integrations never reach it. You only need to account for it if you route an unusually large number of API keys through a single outbound IP (for example, an iPaaS platform serving many workspaces from a shared egress pool). Unauthenticated requests count toward this ceiling, so a client looping on an invalid key is throttled even though it never authenticates.Rate limit response headers
A throttled request returns429 Too Many Requests with these headers:
These headers are sent only on a
429. Successful responses do not carry them,
because the limiter does not report a running count that we could publish
accurately. Pace your retries with Retry-After rather than tracking a
remaining budget.

