Rate limits

Limits are per API key. Buyer keys and seller keys have independent buckets. Auth is checked first — an invalid key never consumes the rate-limit bucket. See Authentication.

A exceeded bucket returns HTTP 429:

{ "code": "rate_limited", "message": "per-key rate limit exceeded" }

The numeric ceiling is configured on the gateway, not on this page. The wire code is always rate_limited. See Errors.