What to expect
The default API budget is 1,500 requests per minute per authenticated principal — each API key, or each signed-in user. Keys do not share one organization-wide bucket: two keys can each use their own 1,500/minute window. When you exceed the limit, the API responds with429 Too Many Requests and includes Retry-After, X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers (X-RateLimit-Reset is Unix epoch seconds):
retry_after seconds. See MCP tools reference.
Handling 429 responses
Treat429 as a signal to slow down, not as a failure. Retry the request after a short delay, increasing the delay on repeated 429s (exponential backoff).
Best practices
Back off exponentially
Double the wait time after each consecutive
429 to let the limit recover.Add jitter
Randomize backoff slightly so retries from multiple workers don’t align.
Batch where possible
Use list-based bulk operations instead of many single-record calls.
Cache reads
Avoid re-fetching data that rarely changes within a short window.
If your integration consistently needs higher throughput, contact support@metal.ai to discuss limits for your plan.

