Rate limits
Per-key limits, the headers we return, and how to back off.
Each API key has a per-minute request budget. Every response advertises your current standing:
| Header | Meaning |
|---|---|
X-RateLimit-Limit | Requests allowed per minute |
X-RateLimit-Remaining | Requests left in the current window |
Retry-After | Seconds to wait (sent on 429) |
When you exceed the budget you get 429 with code: rate_limited and a Retry-After header. Back off for that many seconds, then retry.
Public widget keys (pk_*) are limited per visitor: each visitor gets the key's per-minute budget, and the key as a whole allows ten times that. One busy visitor is slowed down without blocking everyone else on your site.
The SDKs handle this for you
The official SDKs read these headers and retry with backoff automatically.