Phorest · Rate Limits

Phorest Rate Limits

Phorest's public API reference documents a flat, uniform rate limit across the entire third-party API: 100 requests per second, returned as a 429 response when exceeded. This limit is stated identically on every documented endpoint (clients, appointments, staff, services, products, purchases, vouchers, and reporting) rather than varying per resource. Phorest does not publish webhooks; the getting-started guide explicitly recommends polling instead, so integrators are expected to design polling intervals against this same 100 rps ceiling. The Staff Work Time Tables endpoint is called out as an exception to pagination (not rate limiting) - it always returns the full result set for a date range with no size/page support.

Phorest Rate Limits is the machine-readable rate-limit profile for Phorest on the APIs.io network, in the API Commons Rate Limits shape.

It captures 5 rate-limit definitions, measuring requests, days, records, and characters.

An exhausted limit returns HTTP 429.

This profile was written by API Evangelist and has not been verified against a page the provider published; treat every limit as unconfirmed until a dated transcription replaces it.

The profile also includes 3 backoff/retry policies defined and response codes documented for throttled.

Tagged areas include Salon Software, Spa Software, Rate Limiting, and Quotas.

5 Limits Exhausted: HTTP 429
Method: generated, dated 2026-07-03.
Written by API Evangelist on 2026-07-03 and not verified against a page the provider published. Treat every limit as unconfirmed until a dated transcription replaces it.
View Source
Salon SoftwareSpa SoftwareRate LimitingQuotas

Limits

Global API Requests account
requests
100 per second
Stated as "Request rate limit exceeded. Current limit set to 100 rps" identically across all documented endpoints.
Appointments List Range endpoint
days
1 month per request
The appointments list endpoint accepts at most a one-month from_date/to_date window per call.
Pagination Size endpoint
records
100 per page (default 20)
Most list endpoints support size (max 100) and page (zero-indexed) query parameters.
Staff Work Time Tables endpoint
records
unbounded (no pagination)
This endpoint does not support pagination and always returns all records for the given date range.
Booking Note Length field
characters
50000
The booking/appointment note field is capped at 50,000 characters.

Policies

Polling Over Webhooks
Phorest does not support webhooks; the getting-started guide directs integrators to poll list endpoints (e.g. by updatedAfter/updatedFrom timestamps) instead.
Basic Auth Per Request
Every request carries HTTP Basic credentials; there is no OAuth token bucket or per-token limit distinct from the flat 100 rps account ceiling.
Regional Gateway Isolation
EU and US/AUS traffic is served from separate regional gateways (api-gateway-eu vs api-gateway-us); the 100 rps limit is documented per gateway/business, not globally pooled across regions.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/phorest-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.