Rate limits

Anonymous reads of GET /v1/requests and the public MCP tools are rate limited. A limit returns 429 RATE_LIMITED.

Authenticated publish is limited per principal. Back off and retry with the same Idempotency-Key when the response says the limit was hit. Do not create a second Request to get around the limit.