Rate limits

Each API key gets 120 requests per minute (fixed window).

Every response carries the limit headers, so pollers can self-throttle:

Header	Meaning
`X-RateLimit-Limit`	Requests allowed per window.
`X-RateLimit-Remaining`	Requests left in the current window.
`Retry-After`	On 429 only — seconds until the window resets.

http

HTTP/1.1 429 Too Many Requests
Retry-After: 12

{ "statusCode": 429, "message": "Rate limit exceeded (120/min). Retry in 12s." }

Limits are per key, not per IP — one noisy integration can't starve another. Back off on 429 and honor Retry-After.