Rate limits
Each API key has a per-minute request limit. Every key-authenticated response reports your standing in three headers:
| Header | Meaning |
| --- | --- |
| X-RateLimit-Limit | The per-minute ceiling for this key. |
| X-RateLimit-Remaining | Requests left in the current minute window. |
| X-RateLimit-Reset | Unix epoch seconds when the window rolls over. |
The ceiling is the key's configured rate_limit_per_min, or the default if none is set.
When you exceed it
A request over the limit returns 429 with the rate_limited envelope and a Retry-After header
(seconds to wait before retrying):
{
"error": {
"code": "rate_limited",
"message": "rate limit exceeded",
"requestId": "0190abcd-1234-7000-8000-000000000000"
}
}Retry-After: 23
Back off until Retry-After (or X-RateLimit-Reset) elapses, then retry.
Beyond the per-minute limit, a per-tenant monthly request quota exists but is inert by default — it
engages only when your plan configures a hard limit.api_requests entitlement. Until then, only the
per-minute limit applies.