Rate limits
REST v1 and MCP share a durable limit of 60 requests per minute per credential. Limits remain consistent across application restarts and server instances. Raw-report REST requests withread consume that quota even when they lack
credit_reports. They receive 403 forbidden while quota remains and 429
when it is exhausted. The bucket is shared with summary reads and does not
change when the caller switches IP addresses.
When the limit is exceeded, the API returns 429 with the normal error envelope and these headers:
Wait for
Retry-After, then retry with exponential backoff and jitter. Avoid parallel retries for the same credential.