Skip to main content
When rate limiting is enabled, responses include standard limit headers.
If a request is denied:

Keying

Authenticated requests are rate-limited by API key ID. Unauthenticated requests fall back to client IP.

Client behavior

  • Back off on 429.
  • Respect Retry-After when present.
  • Use exponential backoff for repeated limit responses.
  • Avoid retry storms by preserving idempotency keys on retried POST requests.