All Stax API routes are throttled to 200 requests per minute per IP address. You are only allowed 10 failed API requests per minute per IP address. If you hit either of these limits, you will be blocked for one hour.
Stax.js routes are different. When you call the .pay() or the .tokenize() method, Stax.js hits the Stax API with the defined Web Payments token. This resource is throttled to 10 requests per minute per IP address.
Some of the other APIs that Stax offers may be throttled at a lower rate, dependent on the security risk of those APIs.
Note: If you need to process a higher number of requests, or have a use case where you think you may need to bypass these limits, please reach out to the Stax support or partner support team to have your IP address(es) whitelisted, or for more information about throttling.