Vendure Rate Limits
Rate limit posture for Vendure. The open-source framework does not impose request rate limits — operators configure their own throttling at the edge (reverse proxy, CDN, API gateway) or via the harden-plugin. This document captures the operator-side controls Vendure exposes plus the GraphQL safety knobs shipped in `@vendure/harden-plugin`.
Vendure Rate Limits is the rate-limit profile for Vendure on the APIs.io network.
The provider publishes no rate limits that could be read; the profile records that absence rather than inventing a ceiling.
Limit state is signalled in the limit, remaining, reset, and retryAfter response headers, and an exhausted limit returns HTTP 429.
The profile also includes response codes documented for throttled and serviceUnavailable.
Tagged areas include Commerce, Headless, eCommerce, GraphQL, and Open Source.
limitremainingresetretryAfter
generated, dated 2026-05-22.
Limits
Work with this as data
Every rate limit here is available over the APIs.io API and to AI agents over MCP.