Rate limiting

Limits are enforced per person within the organization (the JWT sub and org claims together). Every token of the same person in the same organization draws from one budget: a new token does not reset it.

Tier	Reads/min	Writes/min	Burst
Default	600	60	100
Premium	3000	300	500

Every response includes:

X-RateLimit-Limit: 600
X-RateLimit-Remaining: 587
X-RateLimit-Reset: 1715961240

Header	Meaning
X-RateLimit-Limit	Requests allowed in the current window.
X-RateLimit-Remaining	Requests left in the current window.
X-RateLimit-Reset	Unix timestamp when the window resets.

When exceeded, the API returns 429 rate_limited with a Retry-After header in seconds. See Errors for the full error envelope and retry guidance.