# Integration Notes

## Server-To-Server integration

We expect a server-to-server integration; your `clientId` and `clientSecret` should not be part of any frontend (app, web, …).

![](/images/partner/d10d97671278b343dc71ceee692fd908081e8119bc0a919b72e3b2057e52046e-System_overview.png)

## Rate Limiting

Our APIs are rate-limited. Rate-limits can be configured for each client credential. After you have obtained an accessToken, you can use the `[/auth/me](/api/authentication#obtain-information-about-current-api-consumer)` endpoint to see your rate limit. It's determined by two fields:

* `rateLimit`, e.g. 1000
* `rateLimitIntervalInSeconds`, e.g. 600

This means that you can perform 1000 calls to our API within 600 seconds (10 minutes) before you get rate-limited (until the next 600s block starts).

## Pagination

All endpoints that return a collection are paginated using Offset Pagination.