Per-org RPM bucket
The primary rate limit is a per-org bucket, shared by every API key in the org. It is sized by your API tier:
All keys in the org draw from the same bucket — issuing more keys does not increase your RPM.
Enterprise limits are negotiated per contract; the figures above are the enforced default until a custom value is contracted for your org.
Per-key ceilings (optional)
Admins on Growth, Scale, or Enterprise (or Business+ on the Platform ladder) can set a per-key RPM/TPM ceiling in Developers → Keys → Rate caps. A per-key ceiling can only tighten the bucket for that key — it cannot exceed the org bucket.Burst
Org admins can opt into burst mode. When enabled, requests above the tier RPM pass through at standard rate (no premium markup, normal credit/op billing) up to a defensive 5× tier RPM ceiling, which still throttles. Burst is off by default.Response headers
Every response includes:Retry-After is in seconds; X-RateLimit-Reset is a Unix timestamp (seconds).
429 response
When a limit is hit, the response is:Spend cap (budget)
A dollar spend cap is a separate limit from RPM — it protects against overspending across a billing cycle, not against burst traffic. When the cap is reached, requests return402 AI_CREDITS_EXHAUSTED: