> ## Documentation Index
> Fetch the complete documentation index at: https://help.nops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Rate limits

> Public API rate limiting and write quotas

# Rate limits

The Public API applies multiple protection layers:

1. **Pre-auth IP limit** — invalid-key spraying is throttled before key validation.
2. **Per-key limit** — authenticated requests are limited per API key.
3. **Write quotas** — email sends and scheduled-prompt runs have daily caps.

When limited, the API returns `429` with a standard error envelope.

## Write quotas

| Operation               | Default daily limit (per org + key) |
| ----------------------- | ----------------------------------- |
| Scheduled prompt `run`  | 50                                  |
| Notification `schedule` | 100                                 |

## Idempotency

`POST` and `PATCH` write endpoints require an `Idempotency-Key` header. Keys are scoped per organization and API key so replays cannot collide across tenants.