Concepts

Rate limits

120 requests a minute per key, with headers that say how many are left.

Each credential may make 120 requests a minute: bursts of up to 120, refilled at two a second. Every answer carries the current state:

HeaderMeaning
X-RateLimit-LimitRequests allowed per minute for this key.
X-RateLimit-RemainingRequests left before the limit applies.
X-RateLimit-ResetSeconds until the limit is fully restored.

Past the limit, the answer is 429 rate_limited with Retry-After in seconds. Nothing ran, so any request, writes included, is safe to send again after waiting.

The SDK and the CLI wait out a Retry-After of up to 60 seconds and retry on their own (twice by default; set maxRetries in the SDK).

Failed sign-ins are limited per address too: 20, then one every three seconds.