Rate Limits
Updated: 15 July 2026
These fixed-window limits protect normal interactive use from automation abuse. They are separate from plan entitlements such as projects, monthly generations, seats and sandbox minutes. A rejected request does not consume a plan entitlement. Limits are enforced in the backend; the browser is not the security boundary.
| Action | Current limit |
|---|---|
| Public enquiry form | 3 per normalized email address per hour; 100 total per hour |
| Start generation | 5 per user per minute |
| Send Studio message | 60 per user per minute |
| Create project | 10 per user per minute |
| Rename project | 60 per user per minute |
| Delete project | 10 per user per hour |
| Restore checkpoint | 10 per user per hour |
| Stop run | 20 per user per minute |
| Refresh signed preview | 30 per user per minute |
| Create team workspace | 5 per user per day |
| Complete / skip onboarding | 20 per user per hour for each action |
| Billing checkout / portal | 5 / 10 per user per hour |
The enquiry limiter stores an HMAC fingerprint of the normalized email address, never the raw address, and removes expired buckets hourly. Authenticated rate-limit metadata is included in the account data export and deleted with the account. If a limit is reached, wait for the stated window to reset. Persistent false positives can be reported to majed.tamim@algosweden.se.