Skip to main content
Conventions that apply to every request, and the limits you share across them. For the endpoint itself, see Create an order.

​
Request format

  • Content-Type: application/json
  • The three signature headers on every call — see Authentication
  • A timestamp within 5 minutes of our clock

​
Response format

JSON with snake_case keys. Errors come in one of two shapes, and which one you get depends on the status: Each status is documented under Errors.

​
Rate limits

300 requests per 5 minutes, counted by source IP across all endpoints. Contact support if your integration needs a higher ceiling. Get eSIM status carries a second, tighter limit of 60 requests per minute, counted against your access key rather than your IP, because every call reaches the upstream provider. Both limits apply to it. Going over returns 429 Too Many Requests with a Retry-After header in seconds:

Create an order

The endpoint, the webhook, and the errors

Authentication

Sign your requests
Last modified on August 21, 2026