> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# API Limits & Errors

> Rate limit thresholds, exponential backoff, and standard HTTP error codes.

Snapsec enforces rate limits to ensure platform stability and equitable resource availability.

***

## Rate Limit Thresholds

* **Standard Token**: 600 requests per minute (10 req/s).
* **Service Account Token**: 3,000 requests per minute (50 req/s).
* **Rate Limit Headers**:
  ```http theme={null}
  X-RateLimit-Limit: 600
  X-RateLimit-Remaining: 582
  X-RateLimit-Reset: 1731170000
  ```

***

## Standard Error Response Schema

When an API error occurs, Snapsec returns a consistent RFC 7807 problem details object:

```json theme={null}
{
  "error": {
    "code": "INVALID_SCOPE",
    "message": "The provided IP range '256.0.0.1/32' is not a valid CIDR.",
    "param": "targets[0].value",
    "status": 400
  }
}
```

### Error Codes

* `400 Bad Request`: Validation failure.
* `401 Unauthorized`: Missing or invalid Bearer token.
* `403 Forbidden`: Insufficient RBAC permission or IP restriction.
* `404 Not Found`: Resource does not exist.
* `429 Too Many Requests`: Rate limit exceeded; back off and retry.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.