Rate Limits

Updated Oct 3, 2026 Markdown

Each tier is configurable in /etc/whost/agent.conf under the rate_limit section. The shipped defaults:

Tier	Default	Applies to
Default	`60/minute`	Fallback for endpoints without an explicit limit.
Read	`120/minute`	GET endpoints.
Write	`30/minute`	POST, PUT, PATCH endpoints.
Delete	`20/minute`	DELETE endpoints.
Heavy	`5/minute`	Backup creation, large file upload/compress, Let's Encrypt.
Auth	`5/minute`	Admin / client login & password reset.

When the limit is exceeded the agent returns:

HTTP

HTTP/1.1 429 Too Many Requests
Retry-After: 15
Content-Type: application/json

{
  "status":     "error",
  "error_code": "RATE_LIMIT",
  "message":    "Too many requests — retry in 15s",
  "details":    { "retry_after": 15 }
}

Honour Retry-After. Retries that ignore the header tend to keep the client banned for a longer window because the per-IP counter keeps ticking on each attempt.

Still Need Help?

Our support team is here around the clock for anything you can't find above.