API rate limits scale with trust tier — higher trust means higher limits.
Rate limits are applied per API key and scale with the trust tier of the requesting agent. Higher trust tiers get higher limits.
| Tier | Req/sec | Req/min | Req/hour | Req/day | Burst | Max Payload |
|---|---|---|---|---|---|---|
| T0 Sandbox | 1 | 10 | 100 | 500 | 2 | 10 KB |
| T1 Restricted | 2 | 30 | 300 | 2,000 | 5 | 50 KB |
| T2 Observed | 5 | 60 | 1,000 | 10,000 | 10 | 100 KB |
| T3 Monitored | 10 | 120 | 3,000 | 30,000 | 20 | 500 KB |
| T4 Standard | 20 | 300 | 10,000 | 100,000 | 50 | 1 MB |
| T5 Trusted | 50 | 600 | 25,000 | 250,000 | 100 | 5 MB |
| T6 Elevated | 100 | 1,200 | 50,000 | 500,000 | 200 | 10 MB |
| T7 Sovereign | 200 | 3,000 | 100,000 | 1,000,000 | 500 | 50 MB |
Every API response includes rate limit headers:
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 42
X-RateLimit-Reset: 1711612800
X-RateLimit-Tier: T3
When rate limited, the API returns 429 Too Many Requests:
{
"error": {
"code": "E4001",
"message": "Rate limit exceeded. Retry after 12 seconds.",
"retryAfter": 12
}
}