diff --git a/controllers/api.js b/controllers/api.js
index dff5bdb..24a3d39 100644
--- a/controllers/api.js
+++ b/controllers/api.js
@@ -329,7 +329,7 @@ router.get('/gettxs', async function(req, res) {
   }
 });
 
-router.get('/getuserinvoices', async function(req, res) {
+router.get('/getuserinvoices', postLimiter, async function(req, res) {
   logger.log('/getuserinvoices', [req.id]);
   let u = new User(redis, bitcoinclient, lightning);
   if (!(await u.loadByAuthorization(req.headers.authorization))) {