Polymarket US
BUSINESS · COMMERCE & FINANCE
Markets, events, and prices on the US exchange, plus their own orders and positions.
Connecting Polymarket US in practice
Polymarket US signs every request with Ed25519 rather than sending a bearer token: X-PM-Access-Key, X-PM-Timestamp and X-PM-Signature over the timestamp, method and path, and a timestamp more than 30 seconds off server time is rejected, so an agent needs a correct clock as much as a key. The limit is 20 requests per second per API key, and 20 per second per IP on unauthenticated endpoints.
Rate limits
- 20 requests per second per API key on authenticated endpoints.
- 20 requests per second per IP on unauthenticated or public endpoints.
- Exceeding it returns { "status": 429, "message": "Too Many Requests" }.
Who has to approve
Identity verification comes before API access. The documented path is to create an account in the Polymarket US app, complete KYC identity verification, then create a Key ID and Secret Key in the developer portal at polymarket.us/developer; the secret key is shown only once.
Worth knowing
- A rejection reading "Global Rate Limit Exceeded" is not a rate limit: it is a 5-second latency stopgap on order processing, and the documentation says not to throttle traffic in response to it.
- Because the signature covers a timestamp with a 30-second tolerance, clock drift on the caller looks exactly like a bad key.
- The documented mitigation for anything live is WebSocket streams plus caching of reference data, not a faster REST poll.
- Polymarket US is a separate documentation set and developer portal from polymarket.com, whose builder tiers cap Relayer transactions at 100 a day until a builder is verified by email — do not read one set of limits as the other.
Checked against Rate limits (2026-09-29), Authentication (2026-09-29), Builder tiers (polymarket.com) (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Polymarket US behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.