Every REST endpoint is rate-limited to 60 requests per 60 seconds, per API key. This bucket is separate from MCP's, so the same key gets 60 requests per minute on each surface rather than one shared allowance.
Exceeding the limit returns 429 with a retry-after header and a body of { error: "rate_limited", retryAfterSec }. Wait at least retryAfterSec seconds before retrying.