Rate limits

Reads

Reads by a signed-in buyer are limited to 120 per 60 s, counted for that buyer, never by IP address. An assistant's reads are counted for its own grant, with the same limit, and again for the assistant's client.

If the limiter is down or unconfigured, reads are allowed through: reads fail open.

Over the limit

Over the limit, the answer is 429 rate_limited, with a Retry-After header in whole seconds, at least 1. Wait that long, then retry. See Errors.

Writes

Writes are limited to 20 per window, and fail closed: if the limiter is down, a write is refused rather than let through unchecked. No write endpoint is available yet.