​

API rate limits & quotas console

​

What this page governs

• Requests per minute (rate limit) — throughput: how many requests a key may make inside each one-minute window. Exceeding it rejects the excess calls with 429 until the window rolls over.
• Monthly request quota — volume: a hard ceiling on requests counted from the 1st of the month (UTC). Exceeding it rejects every further call with 429 until the month resets.
• Usage-alert threshold — an advisory early-warning line, expressed as a percent of the monthly quota. Crossing it only flags the key in the console; it never blocks traffic. The monthly quota is the thing that blocks.

​

Limits and defaults

​

Org-wide default

1. Open Developer → API governance.
2. In the Org-wide default card, set the fields you want — requests per minute, monthly request quota, and/or the usage-alert threshold.
3. Save. Only the fields you touch change; a blank field clears that setting.

​

Per-key override

1. In the per-key table, find the key and click Set override (or Edit override on a key that already has one).
2. Enter a requests-per-minute value, a monthly quota, or both. Leave a field blank to inherit the org default for that dimension.
3. Save. To remove the override entirely, clear both fields and save — the key goes back to the org default.

​

Live usage and headroom

• This minute — requests inside the current per-minute window.
• This month — requests since the 1st (UTC).
• Headroom — a bar showing usage against the effective monthly quota. A key crossing the usage-alert threshold is flagged; a key past quota is marked Over quota and starts receiving 429 until the month resets.

​

Worked example

​

How an override propagates

​

Program rate limits via API

curl -X PUT https://api.orbit.devotel.io/api/v1/developer/governance/keys/key_abc123 \
  -H "X-API-Key: dv_live_sk_..." \
  -H "Content-Type: application/json" \
  -d '{
    "requests_per_minute": 2000,
    "monthly_request_quota": 5000000
  }'

{
  "data": {
    "api_key_id": "key_abc123",
    "override": {
      "requests_per_minute": 2000,
      "monthly_request_quota": 5000000,
      "monthly_spend_limit_minor": null
    },
    "effective_limits": {
      "requests_per_minute": 2000,
      "monthly_request_quota": 5000000,
      "monthly_spend_limit_minor": null
    }
  },
  "meta": {
    "request_id": "req_abc123",
    "timestamp": "2026-08-31T12:00:00Z"
  }
}

import { Orbit } from '@devotel-orbit/node';

const orbit = new Orbit({ apiKey: 'dv_live_sk_your_key_here' });

// Governance is not on the SDK's resource list — use the low-level
// request() escape hatch, which handles auth, JSON serialisation,
// idempotency, and 429/5xx retry the same as every SDK resource.
const res = await orbit.request<{ data: {
  api_key_id: string;
  effective_limits: { requests_per_minute: number | null; monthly_request_quota: number | null };
} }>(
  'PUT',
  '/api/v1/developer/governance/keys/key_abc123',
  { requests_per_minute: 2000, monthly_request_quota: 5000000 },
);

console.log(res.data.effective_limits);

​

Troubleshooting

​

Permissions