# What are Openprovider API calls limits?

## Question

How many calls can be sent to Openprovider API until access is blocked/denied?

## Answer 

There are two patterns of API calls that can lead to API access block based on various conditions:

1. **Identical calls** - any calls to the Openprovider API using <span>valid</span> credentials, where all arguments are identical
2. **Failed login attempts** - any calls to the Openprovider API using <span>invalid</span> credentials

<table id="bkmrk-call-type-rate-limit"><tbody><tr><td>**Call type**</td><td>**Rate limits (LIVE)**</td><td>**Response**</td><td>**API access block time**</td></tr><tr><td>Identical calls

Excluded commands: (because other rules are applied)

'createDomainRequest', 'checkDomainRequest', 'generateTokenAuthRequest', 'createCustomerPhoneVerificationRequest'

</td><td>300 calls / 300 seconds</td><td>```
10005 Access denied
```

</td><td><span>Until removed manually</span></td></tr><tr><td>Identical calls of 'checkDomainRequest'

</td><td>20 calls / 300 seconds</td><td>```
Calls limit has been reached
```

</td><td><span>300 seconds</span></td></tr><tr><td>Identical calls of 'createDomainRequest'</td><td>15 call / 300 seconds</td><td>```
4007 API access temporarily blocked because of excessive use
```

</td><td>300 seconds</td></tr><tr><td>Failed login attempts</td><td>100 calls / 3600 seconds</td><td>```
Calls limit has been reached
```

</td><td><span>20 minutes</span></td></tr><tr><td>REST API token generation requests (generateTokenAuthRequest)</td><td>30 calls / 60 seconds</td><td>```
Calls limit has been reached
```

</td><td><span>1 minute  
</span></td></tr><tr><td>Identical calls of checkDomainRequest for the following TLDs:  
'eu', 'xn--e1a4c', 'uk', 'co.uk', 'org.uk', 'me.uk', 'it', 'ch', 'fi', 'fr'

</td><td>60 calls / 60 seconds</td><td>```
Calls limit has been reached
```

</td><td><span>1 minute</span>

</td></tr><tr><td>Incorrect/invalid operations or API Calls for .eu</td><td>10 errors / 1200 seconds</td><td>```
<span><span>Invalid extension. This domain extension is not enabled for your account. Please contact our support department for more information. </span></span>
```

</td><td><span>Until removed by Openprovider [Support](https://www.openprovider.com/company/contact-us/contact-support)</span>

</td></tr><tr><td><span class="fabric-text-color-mark">Identical calls</span>

<span class="fabric-text-color-mark">createCustomerPhoneVerificationRequest</span>

<span><span>  
</span></span></td><td><span>1 call / 60 seconds</span></td><td>```
<span><span>50 Calls limit has been reached</span></span>
```

</td><td><span><span>60 seconds</span></span>

</td></tr></tbody></table>

#### <span>**Note**</span>

<span>The API call limits are in place to prevent exceeding the thresholds set by registries and providers, which could impact all customers using these services. For this reason, we cannot increase the API limit or whitelist any IP address. Resellers are requested to ensure API calls, especially identical calls, are executed in batches and within the specified limits to avoid blocks.  
  
</span>

 **TIPS**:

1. To restore API access in case of '<span>10005 Access denied</span>': **log in to your RCP account &gt; Navigate to [Contacts overview](https://cp.openprovider.eu/account/dashboard.php) &gt; Click on the blocked contact &gt; Remove blocked IP from the blacklist**
2. To restore API access in case of 'Calls limit has been reached' - wait for 20 minutes after the block or contact Openprovider support team