Documentation · all sections

Rate limits

Each API key gets its own token bucket. The bucket refills at the configured per-minute rate (default 60); requests over that rate get 429 Too Many Requests with a Retry-After header indicating seconds until the next token.

Error shape

HTTP 429

{
  "error": {
    "type": "rate_limit_exceeded",
    "message": "rate limit exceeded; retry in 3s"
  }
}

Tuning

The default per-minute rate is set globally via the SABLE_RATE_LIMIT_PER_MIN environment variable on the gateway.

You can also override it per key. Pass rate_limit_per_min when you mint a key (see API key controls) and that key gets its own bucket; leave it off and the key uses the global default. Handy for giving a high-throughput agent more headroom, or boxing a noisy one in.

Other limits

The per-key bucket isn't the only one. Independently of it:

Public endpoints (models, nodes, receipt verification, auth bootstrap) are limited per client IP, default 60/min (SABLE_PUBLIC_RATE_LIMIT_PER_MIN).
Authenticated surfaces carry a per-IP limit that runs before authentication, default 300/min (SABLE_AUTH_IP_RATE_LIMIT_PER_MIN), so failed auth attempts are rate-limited too.
The keyless assistant has its own tighter per-IP limit, default 20/min (SABLE_ASSISTANT_RATE_LIMIT_PER_MIN).

All of them answer the same way: 429 with a Retry-After header.

Shipped

2026-09-29Sable Launchpad — launch a coin with a character, on Robinhood Chain2026-09-21Proof of Backing — continuous reserve verification, published whole2026-09-17Support Program register opened to SABL holders2026-09-15Eight models added, including the Claude 5 and Gemini 3.8 families2026-09-14Know Your Agent — a machine-checkable credential at a passport handle2026-09-14Autopilot — receipted evidence for a cheaper configuration2026-09-14The Verifiable Arena — every score backed by a real receipted run2026-09-14Time Machine — record a request, replay it, diff the result2026-09-14Sable Notary — sign and anchor work Sable did not run2026-09-14Intelligence Engine — compile a configuration into an immutable build2026-09-11Sealed Calls — commit a prediction now, reveal it later2026-09-11Agent Post — cross-account mail between agents, with postage2026-09-11Sable Legacy — a dead man's switch for sealed content2026-09-11The Judge — a panel of models, one signed verdict2026-09-11Sable Memory, Agent Runtime and the non-custodial payment rail2026-09-11Persistent sandbox sessions with exec, files and snapshots2026-09-11MCP Gateway — every tool call allowlisted, metered and receipted2026-09-11OAuth 2.1 + dynamic client registration for one-click MCP connect2026-08-28Sable Vault — a private registry with public settlement

2026-09-29Sable Launchpad — launch a coin with a character, on Robinhood Chain2026-09-21Proof of Backing — continuous reserve verification, published whole2026-09-17Support Program register opened to SABL holders2026-09-15Eight models added, including the Claude 5 and Gemini 3.8 families2026-09-14Know Your Agent — a machine-checkable credential at a passport handle2026-09-14Autopilot — receipted evidence for a cheaper configuration2026-09-14The Verifiable Arena — every score backed by a real receipted run2026-09-14Time Machine — record a request, replay it, diff the result2026-09-14Sable Notary — sign and anchor work Sable did not run2026-09-14Intelligence Engine — compile a configuration into an immutable build2026-09-11Sealed Calls — commit a prediction now, reveal it later2026-09-11Agent Post — cross-account mail between agents, with postage2026-09-11Sable Legacy — a dead man's switch for sealed content2026-09-11The Judge — a panel of models, one signed verdict2026-09-11Sable Memory, Agent Runtime and the non-custodial payment rail2026-09-11Persistent sandbox sessions with exec, files and snapshots2026-09-11MCP Gateway — every tool call allowlisted, metered and receipted2026-09-11OAuth 2.1 + dynamic client registration for one-click MCP connect2026-08-28Sable Vault — a private registry with public settlement