HTTP 429 Too Many Requests

What is HTTP 429 Too Many Requests?

The 429 (Too Many Requests) status code indicates that the user has sent too many requests in a given amount of time. The response should include a Retry-After header indicating how long the client should wait before making a new request. This is the standard response for API rate limiting.

Common Use Cases

• API rate limiting
• Login attempt throttling
• DDoS protection
• Web scraping prevention

// Laravel - rate limiting with 429
return response()->json([
    'error' => 'Too many requests',
    'retry_after_seconds' => 60,
], 429)
->header('Retry-After', 60)
->header('X-RateLimit-Limit', 100)
->header('X-RateLimit-Remaining', 0);