● PASTEAZA POLICY

API Usage Policy

Security, usage and rate-limit requirements for Pasteaza integrations.

Credentials and authorised use

Keep API keys secret, never embed them in client-side code and rotate keys after suspected compromise.

APIs may be used for collections, disbursements, wallet operations and transaction queries through HTTPS.

Pasteaza may monitor fraud signals, excessive errors and unusual patterns, and limit or suspend access where misuse is detected.

Collections: 60 requests/minute and 5,000/hour. Disbursements: 30/minute and 3,000/hour. Transaction lookups: 90/minute.

Webhook delivery uses three retries with exponential backoff. Exceeded limits return HTTP 429 with Retry-After guidance.

Enterprise customers may request higher limits.