hackhaton-space-stackHackhaton Space Stack
AcademyBuilder
Get Started
All terms
The Basics
  • Stack
  • Frontend & Backend
  • CLI
  • Monorepo
  • Server
  • Localhost
How AI Works
  • Context Window
  • Hallucination
  • Token
  • Prompt Caching
  • Session
  • Compaction
  • Embedding
  • Vector Database
  • RAG
  • Fine-tuning
  • Temperature
  • Inference
  • Reasoning
  • Multimodal
Building With AI
  • Agent
  • MCP
  • System Prompt
  • Skill
  • CLAUDE.md
  • Slash Command
  • Harness
  • Computer Use
  • Agents SDK
  • Voice Agents
  • OAuth
  • Vibe Coding
  • Permission Scope
  • Tool Calling
  • Prompt Injection
  • Eval
  • Guardrails
  • Sandbox
  • Progressive Disclosure
Code & Collaboration
  • Git
  • Commit
  • Branch
  • GitHub
  • Pull Request
  • Open Source
  • Markdown
  • Dependency
  • Merge
  • Fork
APIs & Connections
  • API
  • Auth
  • Database
  • ORM
  • SDK
  • Webhook
  • Endpoint
  • REST
  • HTTP Methods
  • Env File
  • Schema
  • JSON
  • YAML
  • Secret
  • Rate Limit
  • CORS
  • Cookie
  • Encryption
Shipping & Running
  • Deploy
  • Headless
  • Cron
  • DNS
  • CDN
  • Object Storage
  • Serverless
  • Edge
  • Worker
  • Runtime
  • Process
  • Daemon
  • Queue
  • Job
  • State
  • Cache
  • SSH
  • Build
  • Staging
  • Rollback
  • Docker
  • Feature Flag
  • Test
  • CI/CD
  • The Cloud
Debugging & Errors
  • Trace
  • Type Error
  • Stack Trace
  • Log
  • Bug
  • Patch
  • Latency
How Developers Think
  • DRY
  • YAGNI
  • KISS
  • Refactoring
  • Technical Debt
  • Async
← All terms

Type-safe, modern TypeScript scaffolding for full-stack web development

ThreadsGitHub

Info

  • Academy
  • Docs

Legal

  • Terms of Service
  • Privacy Policy

© 2026 Dzulhelmy Nazri

APIs & Connections

$definerate-limit--plain-english

Rate Limit

TLDRA bouncer that says you asked too many times.

A 429 is not you breaking the internet. It is the API saying you asked too fast.

A rate limit caps how many requests you may fire in a window of time. Every vendor has one. It stops one client — or one runaway agent — from eating the kitchen. The number lives in their docs. It is not a mystery.

Why demo day hits it

A human clicks. An agent in a loop can fire a hundred calls before you look up. The CLI retrying a failed deploy. A page that refetches on every keystroke. Same 429.

Fixes that actually work:

  • Back off. Wait. Retry once. Good SDKs already do this.
  • Ask for a list, not a row a hundred times. One trip beats a hundred.
  • Cache the answer you already have.

Sometimes the limit is the plan. Free tiers are slow on purpose. That is a checkout, not a bug.

Build your own cap too

If you expose an endpoint on the public internet, put a limit on it. Judges mash refresh. Bots mash harder. A missing cap is how a weekend project becomes a surprise invoice.

Do not confuse this with CORS. CORS is the browser asking permission. A rate limit is the server saying "later." Your frontend should show a calm "try again" — not a stack trace.

What this unlocks

A 429 is a pause, not a funeral.

Slow down, batch, cache. Spend the quota on the demo, not the loop.

Related

  • API
  • CORS
  • Cache
PrevSecret

APIs & Connections

NextCORS