Keys and limits

1. 1

   Rate and quota

   Each key has a per-minute rate, between 1 and 600, and an optional monthly quota. Over either, the answer is a 429 with a Retry-After header. Fetching the schema is free; only calls that read data count.

2. 2

   Origins

   A key can list the web origins allowed to use it. The check runs only when a request carries an Origin header, so server-to-server calls always pass and an empty list means server-only. A browser calling from an origin not on the list gets a 403 that says exactly that.

3. 3

   Expiry and revocation

   Keys can expire on a date, and can be revoked immediately. Either way the next call gets a 401 naming which of the two happened.

4. 4

   The call log

   Every call is recorded: which tool, which operation, whether it was refused. The last hundred are in the dashboard.