Production-grade API protection

API Rate Limiting as a Service for developers.

LimitYourAPI is a software-as-a-service application that protects auth, billing, and AI endpoints with atomic Redis rate limits, realtime visibility, and fast drop-in integration.

Start for free See API docs
< 15ms median decision latency
Atomic Redis Lua enforcement
SDK + REST works with your stack
main.js

import { LimitYourAPIClient } from 'limityourapi-sdk';
import express from 'express';

const app = express();

// Initialize client
const limiter = new LimitYourAPIClient({ apiKey: process.env.RL_API_KEY });

// Protect all routes globally
app.use(limiter.middleware());

app.listen(3000);
Privacy Policy Terms of Service Contact

What is LimitYourAPI?

LimitYourAPI is a cloud-based rate limiting service that helps developers protect their web applications and APIs from abuse, scraping, and excessive usage. We provide a centralized platform to create rate-limiting rules, manage user quotas, and monitor traffic in real-time, ensuring your servers stay online and performant. Users can sign in with Google to access the dashboard; we only use your email address and profile picture for authentication purposes. Read our Privacy Policy to learn how we handle your data.

ATOMIC OPERATIONS

Backed entirely by Redis Lua scripts. Ensures strict rate limits across distributed systems without race conditions.

ALGORITHM CHOICE

Select the mathematical model that fits your use case. Apply Token Bucket or Sliding Window logic per endpoint.

GRANULAR SCOPING

Enforce limits globally, by individual IP address, by customer API key, or mapped to specific URL paths.

FAIL-OPEN SDK

Engineered for resilience. If the rate limiter service times out or loses connection, your API implicitly allows traffic.

REAL-TIME ANALYTICS

Inspect drop rates, blocked IP ranges, and overall throughput volumes directly from the dashboard.

REST + NODE SDK

Integrate natively using Express middleware in JavaScript, or hit the REST API directly from Go, Rust, or Python.

TOKEN BUCKET

A bucket starts with a set capacity of tokens. Every request removes a token. Tokens are replenished at a constant rate over time.

  • Optimal for bursty traffic profiles.
  • Low memory overhead per user.
  • Allows sudden spikes up to maximum capacity.

SLIDING WINDOW

Tracks exact timestamps of recent requests. Counts the number of requests strictly within the trailing time window.

  • Optimal for strict, deterministic enforcement.
  • Higher memory overhead per tracked user.
  • Zero burst tolerance; ideal for login/payment routes.

Express middleware in two lines.

server.js

import { LimitYourAPIClient } from 'limityourapi-sdk';
import express from 'express';

const app = express();

const limiter = new LimitYourAPIClient({
  baseUrl: 'https://api.v2.limityourapi.tech',
  apiKey: process.env.RL_API_KEY,
  timeoutMs: 500 // Fails open after 500ms
});

// Protect a strict route by IP
app.post('/api/auth/login', limiter.middleware({
  scope: 'ip',
  rule: 'strict_login_limit'
}), (req, res) => {
  // Application logic ...
});

// Protect a public API route by API Key
app.get('/api/v1/data', limiter.middleware({
  scope: 'api_key'
}), (req, res) => {
  // Application logic ...
});
LimitYourAPI vs The Giants

Why not just use Cloudflare or AWS WAF?

Edge firewalls are built for infrastructure protection. LimitYourAPI is built for deep, application-level quota management and superior developer experience.

Capability LimitYourAPI Cloudflare / AWS WAF
Application-Level Context ✔ Deep (Rate limit by User ID, API Key, Custom Tier) ✘ Shallow (Limited to IP, headers, geo)
AI / LLM Token Limiting ✔ Built-in Cost & Token Bucket routing ✘ Not natively supported
Developer Experience (DX) ✔ 2 lines of code with Native SDKs ✘ Complex IaC / Terraform / Dashboard configs
Algorithm Choice ✔ Sliding Window & Token Bucket ✘ Mostly Fixed Window
Vendor Lock-in ✔ Zero. Runs on any cloud (Vercel, AWS, GCP) ✘ Locked to their specific network/DNS edge

Hobby

Free
For early stage builders
  • 10,000 requests per day
  • 3 active rules
  • Community support
  • Data retention: 24 hours

Pro

Rs 999/mo
Approx $35/mo
  • 1,000,000 requests per day
  • Unlimited rules
  • Priority email support
  • Data retention: 30 days

Scale

Rs 2999/mo
Approx $50/mo
  • 10,000,000 requests per day
  • Dedicated Slack support
  • Edge rollout controls
  • Data retention: 1 year