API requests are throttled to 60 requests/second per account. A user’s account can not have more than 1000 folders and 100 folder groups. All XML-RPC data must be UTF-8 encoded. All requests are made via the HTTP POST method. All connections to the iThenticate API server must be made via an SSL connection via https. Requests made over http will be returned a 302 redirect code, which some XML-RPC clients may not handle appropriately.