Rate Limits

The Beach Depository API enforces per-key rate limits using a fixed-window strategy.

Defaults

Each API key is allowed 60 requests per minute by default. This limit is configurable per key in the dashboard.

Rate limits use a fixed 1-minute window. The window resets at the start of each minute.

Every API response includes rate limit headers:

Header	Description
`X-RateLimit-Limit`	Maximum requests allowed in the current window
`X-RateLimit-Remaining`	Requests remaining in the current window
`X-RateLimit-Reset`	Unix timestamp (seconds) when the window resets

When the rate limit is exceeded, the API returns a 429 status code:

{
  "error": {
    "code": "RATE_LIMITED",
    "message": "Rate limit exceeded. Try again in 32 seconds."
  }
}

The X-RateLimit-Reset header indicates when you can resume making requests.