Squarespace Rate Limits

Squarespace Commerce APIs enforce a global limit of 300 requests per minute (an equivalent bandwidth of five requests per second). The Create Order endpoint carries a separate, stricter limit of 100 requests per hour per website when an API key is used for authentication; that stricter limit explicitly does not apply when OAuth is used. Exceeding a limit returns 429 Too Many Requests with a one-minute cool-down period. Squarespace additionally warns that requests sent with a default HTTP-client User-Agent (for example "curl/7.54.0") may be subject to stricter rate limiting, and that requests with no User-Agent header at all are rejected outright — a rate-limit input that is not a numeric quota and is easy to miss.