Skip to main content
To keep the platform fast and fair for everyone, the Metal API enforces rate limits.

What to expect

The default API budget is 1,500 requests per minute per authenticated principal — each API key, or each signed-in user. Keys do not share one organization-wide bucket: two keys can each use their own 1,500/minute window. When you exceed the limit, the API responds with 429 Too Many Requests and includes Retry-After, X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers (X-RateLimit-Reset is Unix epoch seconds):
The Metal MCP server enforces a separate per-user limit on tool calls. Limit errors there also include retry_after seconds. See MCP tools reference.

Handling 429 responses

Treat 429 as a signal to slow down, not as a failure. Retry the request after a short delay, increasing the delay on repeated 429s (exponential backoff).

Best practices

Back off exponentially

Double the wait time after each consecutive 429 to let the limit recover.

Add jitter

Randomize backoff slightly so retries from multiple workers don’t align.

Batch where possible

Use list-based bulk operations instead of many single-record calls.

Cache reads

Avoid re-fetching data that rarely changes within a short window.
If your integration consistently needs higher throughput, contact support@metal.ai to discuss limits for your plan.