# Rate limit exceeded

`https://epcis.dev/errors/rate-limited`

| | |
|---|---|
| status | 429 |
| retryable | true |
| costed | false |
| served by | visibility.cloud · epcis.dev |

The caller sent more requests inside the policy window than the published ceiling permits, so this one was refused. The ceiling is not a secret and was never meant to be discovered by hitting it: it rides every governed response as a RateLimit-Policy field, and it is published as a real number per auth state at /limits and in the door's Offer.

## What to do

Wait the interval named by Retry-After and repeat the identical call — nothing about it was wrong and nothing was metered. To avoid the refusal, read the quota and window from the RateLimit-Policy field of any response, or from /limits, and pace against it.

## Derived from

- docs/specs/shared-surface.md §4.4
- docs/specs/surfaces/visibility.cloud-public-demo.md §2.7 (G-6)
- #400