The Iconfinder API employs strict rate-limiting depending on the authentication method. Not all requests count towards your request rate. Using conditional requests to ease the load on Iconfinder’s servers will only count towards your request rate if a resource has changed. All responses from the API contain information about the current state of rate-limiting. The special X-RateLimit- headers have the following meaning:

Header nameDescription
X-RateLimit-LimitCurrent rate limit for the authentication method used.
X-RateLimit-RemainingRequests remaining until rate limit is reached.
X-RateLimit-ResetTime at which the request counter is reset.
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 99
X-RateLimit-Reset: Mon, 21 Apr 2020 13:27:48 GMT


If you exceed the request rate limit, the Iconfinder API will return a 429 Too Many Requests response code.


Only use this method for server-to-server calls. Never share your application’s client secret with anyone or include it in client-side browser code.