# Rate limits

Limits are per API key and per IP. Exceeding them returns 429 with a Retry-After: 60 header.

## Limits

| Scope | Limit | Purpose |
| --- | --- | --- |
| Per IP (failed auth) | 10 / min | Prevents key brute-forcing |
| Per API key | 120 / min | Prevents abuse |

API reference index: https://sistava.com/en/docs