Access and rate limits
| Interface | Authentication | Rate limited | Application limit |
|---|---|---|---|
| API (JSON / TOON) | Not required | Yes | 60 requests/minute per IP (shared) |
| MCP | Not required | Yes | 60 tool calls/minute per IP (shared), plus 60 MCP HTTP requests/minute per IP |
| WebMCP | Not required | Yes | 60 requests/minute per IP (shared) |
The 60-request application allowance is shared across the public API, MCP and WebMCP for each IP address.
A 30-request/minute per-IP limit on public /api/ routes, with a burst allowance of 20.
Rate-limit rejections return HTTP 429.
API access tokens may be required in the future.