limit max 100) are documented on Overview.
Company rate limit
Your company may send 100 requests per 60 seconds. The window starts on the first counted request and resets when it expires. Every API key for your company shares this bucket. Authenticated calls to/v1/* and POST /mcp count toward the same limit.
What counts
When you are limited
When the company quota is exceeded, the API responds with HTTP429 and code REQUEST_LIMIT_EXCEEDED:
Retry-After response header (seconds). Wait that long before retrying. See Errors for the shared error body shape.
MCP sign-in
MCP OAuth routes under/oauth/* use a separate limit: 30 requests per 60 seconds per client IP. That bucket is not shared with the company REST/MCP quota. The response shape is the same 429 / REQUEST_LIMIT_EXCEEDED with Retry-After.
Related
Errors
HTTP status codes, including
429 and how to resolve them.Overview
Base URL, response wrappers, and pagination conventions.
MCP
Partner MCP tools share the same company request quota as REST.