Rate limits

Authenticated API endpoints enforce per-user daily quotas. Limits reset at the end of the calendar day (application timezone).

Current daily quotas

Endpoint	Daily limit
GET /api/currencies	6 calls / day
GET /api/convert/{from}/{amount}/{to}	24 calls / day
GET /api/usage	4 calls / day

When the limit is exceeded

HTTP 429 with a Retry-After header (seconds until midnight reset):

{
  "message": "Daily API limit exceeded."
}

Track your usage

After you log in, open My usage in the app menu, or call GET /api/usage with a Bearer token, to see remaining quota and recent API calls.

POST /api/login is separately rate-limited to reduce brute-force risk. Exceeding that limit also returns HTTP 429.