Rate limits

Per-IP and per-key limits, headers and retrying.

Limit Scope
300 requests per minute Per IP address (checked before the key)
120 requests per minute Per API key

Every response carries draft-7 rate limit headers. On authenticated requests they describe the per-key limit:

RateLimit: limit=120, remaining=87, reset=34
RateLimit-Policy: 120;w=60

reset is the number of seconds until the window resets. When you get a 429, wait reset seconds (the response also has Retry-After with the same value), then retry. Don't retry in a tight loop.

{
  "success": false,
  "message": "Too many requests. Retry after the number of seconds in the RateLimit header.",
  "timestamp": 1790330400000
}