API Rate Limiting Goes Live: Per-User and Per-IP Limits With 429 Responses
API rate limiting is now active. Every authenticated API request is tracked per user and per IP, with configurable limits per minute and per hour. If you exceed the threshold you will receive a 429 response with a Retry-After header — just back off and retry. Admin accounts are exempt. Individual users or IP addresses can also be given custom limits or blocked entirely. Monthly request counters are stored persistently so you can review your API usage over time.