Rate limits differ between sandbox and production. Exceeding either returns `429`.

| Environment | Limit | Scope |
|  --- | --- | --- |
| Sandbox | 120 requests/minute | Per merchant account |
| Production | 500 requests/minute | Per IP, all endpoints combined |


Back off and retry on `429`. Sandbox limits are lower than production, so load testing against sandbox will not reflect production behaviour.