REST
When limits exist, the API should return429 Too Many Requests (or your chosen status) with enough detail to retry safely. Prefer exponential backoff and respect Retry-After when provided.
Document concrete limits (per IP, per key, per route) here once product publishes them.