69
rate limit
A cap on how often a caller may hit you. 429, not a meltdown.
What is rate limit?
A rate limit counts requests per key — IP, user, token — over a window. Over the cap, refuse with 429 and a Retry-After. It is not a substitute for auth, and auth is not a substitute for it.
Why does rate limit matter when vibe coding?
Models ship a public POST that sends email or calls a paid API. One loop burns the budget. Name the limit, the key, and the status.
How do you do rate limit?
Limit login, password reset, and anything that spends money or sends a message. Key by user when you have one, else IP. Return 429. Do not silently drop.
How do you ask a model for rate limit?
Rate-limit (route): N per window per (user or IP). Over the cap, respond 429 with Retry-After. Do not only hide the button.
What goes wrong with rate limit?
A global limit so one busy customer locks the API for everyone. Partition the key.