Canvas Medical Rate Limits

Canvas Medical publishes no rate-limit numbers, no windows, no burst allowance and no response headers. Both published plans advertise "unlimited API calls". A limit nonetheless exists — the platform security overview states that the edge boundary enforces "TLS termination, IP allow-listing, rate limiting, WAF and DDoS protection" — but it is undocumented and emits no documented client-visible signal, so an agent has nothing to back off against.