Rate limits

How many requests a key can make, and what happens when it makes more.

Each API key can make up to 120 requests a minute. Over that, Sentinel answers 429 with a Retry-After header giving the seconds to wait:

HTTP/1.1 429 Too Many Requests
Retry-After: 18

{"error": {"type": "rate_limited", "message": "Too many requests: up to 120 a minute per key"}}

#Staying under the limit

• Page with the largest limit you can use (100 matters or 200 documents per page) rather than many small pages.
• Use search, or list filters such as custodian and sent_after, instead of fetching everything and filtering yourself.
• Run requests one after another per key, not in large parallel bursts.
• On 429, wait for Retry-After seconds, then retry. On 500, back off exponentially.

#OAuth endpoints

Sign-in endpoints for MCP clients (/oauth/register, /oauth/authorize, /oauth/token) allow up to 20 requests a minute from one IP address. See OAuth for MCP clients.