ShieldLabs · Rate Limits
Shieldlabs Rate Limits
Shieldlabs Rate Limits is the machine-readable rate-limit profile for ShieldLabs on the APIs.io network, in the API Commons Rate Limits shape.
It captures 7 rate-limit definitions.
Limit state is signalled in the ratelimit_headers_published, x_ratelimit, ratelimit_rfc9331, and retry_after response headers.
Tagged areas include Fraud Prevention, Abuse Prevention, Visitor Identification, Device Fingerprinting, and Bot Detection.
7 Limits
ratelimit_headers_publishedx_ratelimitratelimit_rfc9331retry_after
Transcribed from the provider's documentation on 2026-09-04 — docs.shieldlabs.ai/rate-limits.
View Source
Fraud PreventionAbuse PreventionVisitor IdentificationDevice FingerprintingBot Detectionvpn-proxy-detectionRisk ScoringIdentitySecurityWebhooktraffic-qualityA2A
Limits
Per-IP rate limit source IP
15/1 minute
Per-domain ingest one registered domain, all visitor IPs together
Domain freeze registered domain
Shared ingest cap all domains, platform-wide
40/1 second
History API soft cap per site (per Private API Key)
15/1 second
Deliberately sized so a 1:1 identify-to-History-lookup pattern stays inside the ceiling on Scale, whose ingest cap is also 15 RPS. This surface was recorded as "not rate limited" in the previous pass, which is no longer true.
Concurrency cap whole gateway, in-flight connections
512/instantaneous
Request body size per request
512 KB
Work with this as data
Every rate limit here is available over the APIs.io API and to AI agents over MCP.