API Limits & Errors

​

Rate Limit Thresholds

• Standard Token: 600 requests per minute (10 req/s).
• Service Account Token: 3,000 requests per minute (50 req/s).
• Rate Limit Headers:
  X-RateLimit-Limit: 600
  X-RateLimit-Remaining: 582
  X-RateLimit-Reset: 1731170000
  

​

Standard Error Response Schema

{
  "error": {
    "code": "INVALID_SCOPE",
    "message": "The provided IP range '256.0.0.1/32' is not a valid CIDR.",
    "param": "targets[0].value",
    "status": 400
  }
}

​

Error Codes

• 400 Bad Request: Validation failure.
• 401 Unauthorized: Missing or invalid Bearer token.
• 403 Forbidden: Insufficient RBAC permission or IP restriction.
• 404 Not Found: Resource does not exist.
• 429 Too Many Requests: Rate limit exceeded; back off and retry.