How to control REST api requests

[nparikh]

Hello,

We are planning to enable REST API support in application. I have created API key and I am aware with IP whitelisting.

But, is there any way to limit number of requests to Thingworx ? Basically, we don't want 3rd party applications to flood our server.

[PaiChung]

This is something you would have to track.

You could track the number of times the Key is used (by checking the Security log for logins by the user associated with the key)

You could add some code in the services the Key invokes and aggregate number of requests that way.

Based on that you can then send out notifications, remove AppKeys etc.

[ankigupta]

Hi nirav parikh​,

In addition; please provide limited Rights to the user associated with the Appkey. You should also consider to use separate Appkey for different third party Application to differentiate which server sent the request.