Arcjet · Rate Limits

Arcjet Rate Limits

Arcjet is itself a rate-limiting product; this artifact documents limits that apply to Arcjet's OWN decision service rather than the limits customers configure for their applications. Arcjet does not publish hard public per-account request-rate caps on the Decide service; usage is metered and billed per protected request rather than throttled, with tier-based request allowances and Enterprise offering higher allowances. The practical operational control is the SDK request timeout (default 500ms in production, 1000ms in development), after which the SDK fails open by default (configurable to fail closed). The SDK makes a single call to the Decide service per request regardless of the number of rules configured, and caches decisions locally to minimize calls.

Arcjet Rate Limits is the machine-readable rate-limit profile for Arcjet on the APIs.io network, in the API Commons Rate Limits shape.

It captures 4 rate-limit definitions, measuring requests, milliseconds, and calls.

An exhausted limit returns HTTP 429.

This profile was written by API Evangelist and has not been verified against a page the provider published; treat every limit as unconfirmed until a dated transcription replaces it.

The profile also includes 3 backoff/retry policies defined and response codes documented for throttled.

Tagged areas include Security, Rate Limiting, Bot Detection, WAF, and Developer Security.

4 Limits Exhausted: HTTP 429
Method: generated, dated 2026-06-20.
Written by API Evangelist on 2026-06-20 and not verified against a page the provider published. Treat every limit as unconfirmed until a dated transcription replaces it.
View Source
SecurityRate LimitingBot DetectionWAFDeveloper SecurityRate LimitingQuotasThrottling

Limits

Protected Request Allowance account
requests
see provider pricing
Tier-based monthly request allowances; usage metered and billed per protected request rather than hard-throttled. Enterprise offers higher allowances.
SDK Request Timeout (Production) request
milliseconds
500
Default production timeout for a Decide service call; configurable.
SDK Request Timeout (Development) request
milliseconds
1000
Default development timeout, higher to allow for geographic latency to the Cloud API.
Single Call Per Request request
calls
1
Arcjet makes a single Decide call regardless of the number of rules configured; local caching further reduces calls.

Policies

Fail Open by Default
On network problems or timeout the SDK defaults to failing open (allowing requests); it can be configured to fail closed.
Local Caching
The SDK caches decisions in memory so many requests are resolved locally in under 1ms without contacting the Decide service.
Tiered Allowances
Request allowances and retention scale with the pricing tier; Enterprise provides higher request allowances and dedicated capacity.

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/arcjet-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.