Rate Limits

Limits

Layer	Limit	Scope
API key (company)	60 req/min	All requests sharing the same API key
User token	100 req/min	Per authenticated user

The user-token limit prevents a single user from exhausting the company quota.

Headers

Every response includes:

Header	Description
X-RateLimit-Limit	Maximum requests allowed in the window
X-RateLimit-Remaining	Requests remaining in the current window

Exceeded

When the limit is hit the API returns 429 Too Many Requests with a Retry-After header indicating how many seconds to wait.

{
  "message": "Too Many Requests"
}