Fusewp Rate Limits

FuseWP publishes NO rate limits for auth.fusewp.com and returns no RateLimit-*, X-RateLimit-* or Retry-After headers on any response observed on 2026-08-12. What is recorded below is the opposite side of the contract: a CLIENT-SIDE circuit breaker the plugin enforces against itself before calling the OAuth broker, read from the shipped GPL source (AbstractIntegration::is_rate_limit_exceeded). It counts consecutive FAILED token refreshes per integration in the WordPress options table and refuses to call the broker again until the window elapses. An agent or integrator cannot observe these limits from a response header — they are enforced in-process on the customer's own server, which is exactly why they are worth recording. The whole breaker is disabled by the `fusewp_disable_rate_limiting` filter, so it is advisory, not a guarantee.