Opal API Rate Limits

​

Overview

Opal uses rate limits to ensure stability and reliability of our systems.

​

Rate limits

Opal enforces a token-bucket rate limit per route across your organization:

Route	Burst (Bucket Size)	Replenish Rate (Requests / Sec)
GET /v1/user	5000	5000
GET /v1/resources/{resource_id}	5000	5000
GET /v1/resources/{resource_id}/visibility	5000	5000
Default (applies to all other /v1/* API routes)	200	200

​

Rate Limit Enforcement

The above limits are org-wide and apply across all API tokens created for your organization. View your API tokens by navigating to Configuration > API Access Tokens.

Responses include X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers. Requests above the rate limit receive an HTTP 429 error.

These limits apply to Opal Cloud. Opal may set different limits for individual organizations. Self-hosted deployments are not rate limited.