Developers

API basics and rate limits

The API is open on every plan. Rate limits still apply — each key is capped per hour, and going over returns 429 with when to retry.

2 of 5 in Developers

Plan: Access on all plans; rate limits scale by plan.
Webhooks and API documentation surface in product
Showcase book · Harbour Print & Signage (sample data) · light theme

PayBlah exposes a REST API so your stack can read debtors and invoices, record payments, and inspect the message log within the scopes on your key.

Rate limits

  • Each key is limited to a fixed number of requests per hour for your plan (the Settings foot note shows the current number when you issue keys).
  • Every response carries X-RateLimit-Remaining.
  • Over the limit: 429 with guidance on when to retry. Back off; do not spin.

Design habits that work

  • Prefer webhooks for "something happened" instead of polling every minute.
  • Use read-only scopes for reporting tools.
  • Idempotency: treat webhook event ids and your own write keys carefully so retries do not double-post payments.

What the API will not do

It will not bypass safety rails (see API safety). Acceptable use still applies — the API is not a bulk-spam door.

PayBlah is accounts-receivable automation software. You remain the creditor. Confirm local rules with your own advisor for your territory (US, UK, Ireland, or Australia).