- 600 requests a minute per API key.
- 600 requests a minute per IP address. Several keys used from one server share that server’s limit.
RateLimit-Limit header (the limit) and a RateLimit-Remaining header (requests left in the current one-minute window). Server code can read them; code running in a browser, including the playground, can’t, because the API doesn’t expose them to web pages. Over a limit, the API answers 429 with "code": "rate_limited" and a Retry-After header: the number of seconds to wait before trying again.

