# The rate limits for every surface on one page

- Date: 2026-10-25
- Type: New
- Surface: Developer portal and CLI
- What you need to do: Nothing.
- Address: https://developers.rivr.io/changelog/2026-10-25-rate-limits-page

The page /rate-limits, also at /rate-limits.md, says the limits that apply per surface: /api/public (1,200 calls a minute per token, at most 200 at once), the token endpoint of organisation keys (60 calls a minute per IP address), the portal and its MCP server. For each it says what is counted, what a 429 carries (Retry-After and the body) and how a client should back off. The portal's own 429 now says rate_limited in its body instead of internal_error.

