# @upstash/ratelimit

> [![npm (scoped)](https://img.shields.io/npm/v/@upstash/ratelimit)](https://www.npmjs.com/package/@upstash/ratelimit) [![Tests](https://github.com/upstash/ratelimit/actions/workflows/tests.yaml/badge.svg)](https://github.com/upstash/ratelimit/actions/workf

Latest version **2.1.0** (published 2026-09-14) · MIT license · 1.6M weekly downloads

## Install

```sh
npm install @upstash/ratelimit
pnpm add @upstash/ratelimit
yarn add @upstash/ratelimit
bun add @upstash/ratelimit
```

## Health

**Score 75/100 (B)** — status: active.

Positive: high downloads; no vulnerabilities; recently updated; high maintenance score.

Warnings: no types; no esm support.

## Facts

| | |
|---|---|
| Version | 2.1.0 |
| Published | 2026-09-14 |
| First published | 2022-05-06 |
| Weekly downloads | 1.6M |
| License | MIT |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 0 |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 2047 |
| Maintainers | mdogan, buggyhunter, cahidarda, fahreddin.ozcan, upstashnpm, joshtc, burak-ups, shannonr |

## Links

- npm: https://www.npmjs.com/package/@upstash/ratelimit
- Repository: https://github.com/upstash/ratelimit-js
- Homepage: https://github.com/upstash/ratelimit-js#readme
- Issues: https://github.com/upstash/ratelimit-js/issues
- npm.io page: https://npm.io/package/@upstash/ratelimit

## Recent versions

- 2.1.0 (latest) — 2026-09-14
- 0.0.0-ci.fccd840d6e0f893f50bc677107fba4d913a414e3-20260923003614 (ci) — 2026-09-23
- 2.1.0-rc (canary) — 2026-08-07
- 0.4.3-canary.0 (next) — 2023-05-11
- 0.0.0-ci.fccd840d6e0f893f50bc677107fba4d913a414e3-20260922003809 — 2026-09-22
- 0.0.0-ci.fccd840d6e0f893f50bc677107fba4d913a414e3-20260921004153 — 2026-09-21
- 0.0.0-ci.fccd840d6e0f893f50bc677107fba4d913a414e3-20260920004216 — 2026-09-20
- 0.0.0-ci.fccd840d6e0f893f50bc677107fba4d913a414e3-20260919003736 — 2026-09-19
- 0.0.0-ci.17655ce393608110acc82e9e4963601bca8a9e9e-20260918104259 — 2026-09-18
- 0.0.0-ci.4818b36871d6be6441e0c3c14c0ef8f6cc0fdf35-20260918100433 — 2026-09-18
- 0.0.0-ci.5633b28e2a901fa2661e8338e4b8306666cf57e2-20260918092038 — 2026-09-18
- 0.0.0-ci.e066758ec2570326b8f6a9c8744b0a0f9f4fe343-20260918085934 — 2026-09-18
- 0.0.0-ci.2467334dbb50da73e6dc760a0a1502bf32eddb9c-20260918083946 — 2026-09-18
- 0.0.0-ci.97050acda4aa6f013c76771ab5a9c073c2e936ac-20260918081132 — 2026-09-18
- 0.0.0-ci.7e071b91d801a2e9345bbd751dc544b9b935e006-20260918003752 — 2026-09-18
- … 813 more at https://npm.io/package/@upstash/ratelimit/versions

## README

# Upstash Rate Limit

[![npm (scoped)](https://img.shields.io/npm/v/@upstash/ratelimit)](https://www.npmjs.com/package/@upstash/ratelimit)
[![Tests](https://github.com/upstash/ratelimit/actions/workflows/tests.yaml/badge.svg)](https://github.com/upstash/ratelimit/actions/workflows/tests.yaml)

> [!NOTE]
>  **This project is in GA Stage.**
> The Upstash Professional Support fully covers this project. It receives regular updates, and bug fixes. The Upstash team is committed to maintaining and improving its functionality.

It is the only connectionless (HTTP based) rate limiting library and designed
for:

- Serverless functions (AWS Lambda, Vercel ....)
- Cloudflare Workers & Pages
- Vercel Edge
- Fastly Compute@Edge
- Next.js, Jamstack ...
- Client side web/mobile applications
- WebAssembly
- and other environments where HTTP is preferred over TCP.

## Quick Start

### Install

#### npm

```bash
npm install @upstash/ratelimit
```

#### Deno

```ts
import { Ratelimit } from "https://cdn.skypack.dev/@upstash/ratelimit@latest";
```

### Create database

Create a new redis database on [upstash](https://console.upstash.com/). See [here](https://github.com/upstash/upstash-redis#quick-start) for documentation on how to create a redis instance.

### Basic Usage

```ts
import { Ratelimit } from "@upstash/ratelimit"; // for deno: see above
import { Redis } from "@upstash/redis"; // see below for cloudflare and fastly adapters

// Create a new ratelimiter, that allows 10 requests per 10 seconds
const ratelimit = new Ratelimit({
  redis: Redis.fromEnv(),
  limiter: Ratelimit.slidingWindow(10, "10 s"),
  analytics: true,
  /**
   * Optional prefix for the keys used in redis. This is useful if you want to share a redis
   * instance with other applications and want to avoid key collisions. The default prefix is
   * "@upstash/ratelimit"
   */
  prefix: "@upstash/ratelimit",
});

// Use a constant string to limit all requests with a single ratelimit
// Or use a userID, apiKey or ip address for individual limits.
const identifier = "api";
const { success } = await ratelimit.limit(identifier);

if (!success) {
  return "Unable to process at this time";
}
doExpensiveCalculation();
return "Here you go!";
```

For more information on getting started, you can refer to [our documentation](https://upstash.com/docs/oss/sdks/ts/ratelimit/gettingstarted).

[Here's a complete nextjs example](https://github.com/upstash/ratelimit/tree/main/examples/nextjs)

## Documentation

See [the documentation](https://upstash.com/docs/redis/sdks/ratelimit-ts/overview) for more information details about this package.

## Telemetry

The SDK reports its name and version to Upstash as a header on the requests made
by the redis client you provide, so we know which SDK versions are in use. No
personal data, keys or identifiers are collected.

You can opt out with `enableTelemetry: false`:

```ts
const ratelimit = new Ratelimit({
  redis: Redis.fromEnv(),
  limiter: Ratelimit.slidingWindow(10, "10 s"),
  enableTelemetry: false,
});
```

or by setting the `UPSTASH_DISABLE_TELEMETRY` environment variable. Disabling
telemetry on the redis client itself also disables it here.

## Contributing

### Database

Create a new redis database on [upstash](https://console.upstash.com/) and copy
the url and token.

### Running tests

To run the tests, you will need to set some environment variables. Here is a list of
variables to set:
- `UPSTASH_REDIS_REST_URL`
- `UPSTASH_REDIS_REST_TOKEN`
- `US1_UPSTASH_REDIS_REST_URL`
- `US1_UPSTASH_REDIS_REST_TOKEN`
- `APN_UPSTASH_REDIS_REST_URL`
- `APN_UPSTASH_REDIS_REST_TOKEN`
- `EU2_UPSTASH_REDIS_REST_URL`
- `EU2_UPSTASH_REDIS_REST_TOKEN`

You can create a single Upstash Redis and use its URL and token for all four above.

Once you set the environment variables, simply run:
```sh
pnpm test
```

---
_Source: https://npm.io/package/@upstash/ratelimit · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._