I found it in Kernel.php:
'api' => [
'throttle:60,1',
'bindings',
],
This was overriding any setting set above.
Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.
Setting the api throttle middleware less than 60 works like this:
Route::get('myapi/{value}/{anothervalue}', 'MyApiController@getStuff')->middleware('throttle:5,1');
However, any setting greater than 60 is ignored:
Route::get('myapi/{value}/{anothervalue}', 'MyApiController@getStuff')->middleware('throttle:100,1');
I tried playing with the default $maxAttempts = 60 in the ThrottleRequests class, and that doesn't work. Could there be another overriding throttle besides this Middleware that limits requests to 60 per minute per IP?
I found it in Kernel.php:
'api' => [
'throttle:60,1',
'bindings',
],
This was overriding any setting set above.
Please or to participate in this conversation.