People Data Labs
DATA · DATA & ANALYTICS
Person, company, and IP enrichment and search on their own key.
Connecting People Data Labs in practice
People Data Labs meters credits by type — enrich, search, search_company, enrich_company, person_identify and others — and once x-totallimit-remaining reaches zero every request returns 402 rather than an empty result. The rate limit is a fixed window set per API key and is never published as a figure, so the only way to learn yours is to read x-ratelimit-limit.minute off a response.
Scopes that draw scrutiny
X-Api-Key headerThe documented header form. There are no scopes: the key that enriches a person can also run searches and spend company credits.api_key URL parameterThe documented alternative to the header, which puts the credential into request logs, proxies and browser history.
Rate limits
- A fixed-window rate limiting strategy, defined on a per-key basis; the figure is account-specific and surfaced in the x-ratelimit-limit.minute response header rather than documented.
- Credits are tracked per type: enrich, search, search_company, enrich_company, enrich_skill, enrich_job_title, preview_search and person_identify.
- When x-totallimit-remaining reaches zero, all API requests return 402.
Worth knowing
- Because the limit is per key and unpublished, a client cannot be written against a constant; it has to read the headers and adapt.
- Running out of credits is a 402, not a 429, so retry logic keyed on rate-limit codes will hammer a dead key instead of stopping.
- Keys are requested, rotated and deleted through an account manager or support@peopledatalabs.com rather than self-service, which makes rotation a ticket rather than a script.
Checked against Usage limits (2026-09-29), Authentication (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put People Data Labs behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.