Resources

Rate Limits

Rate limits in Moyo Suite are applied per client IP address, not per organization or plan tier — there’s no paid-tier rate-limit upgrade today.

ScopeLimit
Default (any endpoint without an explicit override)100 requests/minute
/auth/login, /auth/signup, /auth/magic-link, /auth/email-otp/request10 requests/minute
/auth/2fa/verify, /auth/email-otp/verify5 requests/minute
Email preference endpoints10–30 requests/minute depending on endpoint

The tighter limits on login, signup, and 2FA/OTP verification are deliberate — they’re brute-force protection, not general throttling.

Exceeding a limit

A request over the limit gets:

1HTTP/1.1 429 Too Many Requests
1{
2  "detail": "Rate limit exceeded"
3}

Back off and retry after a short delay. There are currently no X-RateLimit-* response headers exposing your remaining quota — plan retries defensively rather than by reading a countdown.