Flask-Limiter

Flask-Limiter adds rate limiting to Flask applications.

You can configure rate limits at different levels such as:

Application wide global limits per user
Default limits per route
By Blueprints
By Class-based views
By individual routes

Flask-Limiter can be configured to fit your application in many ways, including:

Persistance to various commonly used storage backends (such as Redis, Memcached, MongoDB & Etcd) via limits
Any rate limiting strategy supported by limits

Follow the quickstart below to get started or read the documentation for more details.

Quickstart

Install

pip install Flask-Limiter

Add the rate limiter to your flask app

# app.py

from flask import Flask
from flask_limiter import Limiter
from flask_limiter.util import get_remote_address

app = Flask(__name__)
limiter = Limiter(
    get_remote_address,
    app=app,
    default_limits=["2 per minute", "1 per second"],
    storage_uri="memory://",
    # Redis
    # storage_uri="redis://localhost:6379",
    # Redis cluster
    # storage_uri="redis+cluster://localhost:7000,localhost:7001,localhost:70002",
    # Memcached
    # storage_uri="memcached://localhost:11211",
    # Memcached Cluster
    # storage_uri="memcached://localhost:11211,localhost:11212,localhost:11213",
    # MongoDB
    # storage_uri="mongodb://localhost:27017",
    # Etcd
    # storage_uri="etcd://localhost:2379",
    strategy="fixed-window", # or "moving-window", or "sliding-window-counter"
)

@app.route("/slow")
@limiter.limit("1 per day")
def slow():
    return "24"

@app.route("/fast")
def fast():
    return "42"

@app.route("/ping")
@limiter.exempt
def ping():
    return 'PONG'

Inspect the limits using the command line interface

$ FLASK_APP=app:app flask limiter limits

app
├── fast: /fast
│   ├── 2 per 1 minute
│   └── 1 per 1 second
├── ping: /ping
│   └── Exempt
└── slow: /slow
    └── 1 per 1 day

Run the app

$ FLASK_APP=app:app flask run

Test it out

The fast endpoint respects the default rate limit while the slow endpoint uses the decorated one. ping has no rate limit associated with it.

$ curl localhost:5000/fast
42
$ curl localhost:5000/fast
42
$ curl localhost:5000/fast
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>429 Too Many Requests</title>
<h1>Too Many Requests</h1>
<p>2 per 1 minute</p>
$ curl localhost:5000/slow
24
$ curl localhost:5000/slow
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>429 Too Many Requests</title>
<h1>Too Many Requests</h1>
<p>1 per 1 day</p>
$ curl localhost:5000/ping
PONG
$ curl localhost:5000/ping
PONG
$ curl localhost:5000/ping
PONG
$ curl localhost:5000/ping
PONG

Metadata

Release files for Flask-Limiter 3.11.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for Flask-Limiter 3.11.0
File	Size	Uploaded
flask_limiter-3.11.0.tar.gz	303.4 kB	Mar 11, 2025	Details

Built distribution (wheel)

Table of built distributions (wheels) for Flask-Limiter 3.11.0
File	Interpreter	ABI	Platform	Reset
flask_limiter-3.11.0-py3-none-any.whl 28.7 kB Mar 11, 2025	Python 3	none	any	Details

Total release size: 332.0 kB

Release files / flask_limiter-3.11.0.tar.gz

Download URL	flask_limiter-3.11.0.tar.gz
Size	303.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`57b037fb8be423ef7ebac4fbb279fbfdc42d9aa5378467ab6798d6ce3d912117`
BLAKE2b-256 checksum How to use checksums	`9ca402f67783825a4207d4ae7de4c8be45596c3fba5b65ace77fd6dc3878020d`
Upload date	Mar 11, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/alisaifee/flask-limiter
Publishing commit: github.com/alisaifee/flask-limiter/tree/b99478486644ee0bcab49fe8b5de372b0a2a214c

Workflow

Publishing configuration: github.com/alisaifee/flask-limiter/blob/b99478486644ee0bcab49fe8b5de372b0a2a214c/.github/workflows/main.yml
Publishing logs: github.com/alisaifee/flask-limiter/actions/runs/13797653796/attempts/1

Artifact

Subject: flask_limiter-3.11.0.tar.gz
SHA-256 checksum: 57b037fb8be423ef7ebac4fbb279fbfdc42d9aa5378467ab6798d6ce3d912117 Verifying attestations

Release files / flask_limiter-3.11.0-py3-none-any.whl

Download URL	flask_limiter-3.11.0-py3-none-any.whl
Size	28.7 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`ae7ef0b3742228df91073d72eab0ce114fe6b00e6201ad9e12aefd53fe597352`
BLAKE2b-256 checksum How to use checksums	`0d6b54101d1e595686da1fb90e0fb23497de959a39c7f398d4dda7fcdcc5cd76`
Upload date	Mar 11, 2025
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.12.9`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/alisaifee/flask-limiter
Publishing commit: github.com/alisaifee/flask-limiter/tree/b99478486644ee0bcab49fe8b5de372b0a2a214c

Workflow

Publishing configuration: github.com/alisaifee/flask-limiter/blob/b99478486644ee0bcab49fe8b5de372b0a2a214c/.github/workflows/main.yml
Publishing logs: github.com/alisaifee/flask-limiter/actions/runs/13797653796/attempts/1

Artifact

Subject: flask_limiter-3.11.0-py3-none-any.whl
SHA-256 checksum: ae7ef0b3742228df91073d72eab0ce114fe6b00e6201ad9e12aefd53fe597352 Verifying attestations