SoFi Technologies · Rate Limits

SoFi Technologies Rate Limits

SoFi Tech Solutions publishes a Rate Limits reference page for the Program API, and what it publishes is mostly the absence of a number: there is no default call limit, the safe upper bound is negotiated per program, and exceeding it is described as causing system failure rather than as returning a throttling response. The one hard published limit is on the shared Sandbox - 1000 API requests every 10 minutes. There are no rate-limit response headers and no documented exhaustion status code, so a client has no runtime signal at all.

SoFi Technologies Rate Limits is the machine-readable rate-limit profile for SoFi Technologies on the APIs.io network, in the API Commons Rate Limits shape.

It captures 3 rate-limit definitions, measuring requests, bytes, and records.

Limit state is signalled in the ratelimit, retry_after, and note response headers.

The profile also includes 2 backoff/retry policies defined and response codes documented for exhaustion_status and note.

Tagged areas include Fintech, Banking, Payments, and Rate Limiting.

3 Limits ratelimitretry_afternote
Transcribed from the provider's documentation on 2026-09-06 — docs.tech.sofi.com/pro/reference/rate-limits.
View Source
FintechBankingPaymentsRate Limiting

Limits

Sandbox request ceiling per-sandbox-account
requests · per 10 minutes
1000/10 minutes
The only numeric API call limit SoFi Tech Solutions publishes anywhere.
Request payload ceiling per-request
bytes
16 MB
"For many endpoints the payload for an endpoint request cannot exceed 16 MB. Some endpoints can handle larger payloads." Per-endpoint limits are confirmed with SoFi Tech Solutions, not published.
Search Accounts result ceiling per-request
records
400
Not a rate limit but a result-set ceiling - status_code 103, "Too many results were found (>400). Modify search criteria to reduce the number of results." Not counted in limit_count.

Policies

Negotiated program ceiling
The safe upper bound is calculated jointly with SoFi Tech Solutions per program, and varies with core configuration and transactions per account.
Sandbox credential expiry
Sandbox API credentials must be regenerated every 30 days by the company's Sandbox team admin; using expired details fails requests and can lock the company account.

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/sofi-technologies-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.