Overview

import { Ratelimit } from "@unkey/ratelimit";

const limiter = new Ratelimit({
  rootKey: process.env.UNKEY_ROOT_KEY,
  namespace: "my-app", // Group related limits together
  limit: 10, // 10 requests...
  duration: "60s", // ...per minute
});

export async function handler(req: Request) {
  // Use any identifier: user ID, API key, IP, etc.
  const identifier = req.headers.get("x-user-id") ?? getClientIP(req);

  const { success, remaining, reset } = await limiter.limit(identifier);

  if (!success) {
    return new Response("Too many requests", {
      status: 429,
      headers: {
        "X-RateLimit-Remaining": "0",
        "X-RateLimit-Reset": reset.toString(),
      },
    });
  }

  // Request allowed, continue with your logic
  return new Response(`Hello! ${remaining} requests remaining.`);
}

curl -X POST https://api.unkey.com/v2/ratelimit.limit \
  -H "Authorization: Bearer unkey_..." \
  -H "Content-Type: application/json" \
  -d '{
    "namespace": "my-app",
    "identifier": "user_123",
    "limit": 10,
    "duration": 60000
  }'