GrowTech CentralPermissions & rate limits
Who may call what, and how often.
Who may call what
An API key inherits the permissions of the account that made it. A key from an ordinary account cannot call reseller endpoints, even if the address is known.
Rate limits
Each endpoint has a per-minute limit. Past it you get a 429 along with how long to wait.
The limit is per account, not per key
Making a second key does not double your allowance. If you need more, contact us with the number and what it is for.
Using it safely
- Never put a key in code that ships to a browser
- One key per system, so one can be revoked alone
- Revoke keys you no longer use — keys do not expire on their own