Rate Limiting
The gateway enforces sliding-window rate limits per authentication method.
Limits
| Auth method | Rate limit | Daily limit |
|---|---|---|
| API Key | 60 req/min | Unlimited (with credits) |
| Session | 30 req/min | Unlimited (with credits) |
| SpendAuth | 120 req/min | Unlimited |
| Anonymous | 10 req/min | 5 req/day |
| Authenticated (no credits) | 30 req/min | 20 req/day |
Response headers
Every response includes rate limit headers:
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 42
X-RateLimit-Reset: 1712793600429 responses
When rate limited:
{
"error": {
"message": "Rate limit exceeded for this API key.",
"type": "rate_limit_error",
"code": "rate_limit_exceeded"
}
}The X-RateLimit-Reset header indicates when the window resets (Unix timestamp in seconds).