Rate Limits

Device-level automatic rate limiting

ShieldLabs automatically rate-limits devices that send excessive fingerprint checks:

Threshold	Action	Duration
> 10 checks / minute from same DeviceID	Auto-ban	1 hour

When a device is banned, all subsequent webhooks for that device return:

{
  "Score": 999,
  "Details": [
    { "Value": 999, "Description": "User has been banned 1H, to many requests" }
  ]
}

The ban is lifted automatically after 1 hour.

The admin API (api.shieldlabs.ai) has the following limits:

Exceeding limits returns HTTP 429:

{ "error": "too many requests" }

The public endpoints /pub/{public_key}/{secret_key}/... are rate limited to:

Endpoint	Limit
`/pub/.../debug/...`	100 req / minute
`/pub/.../history/...`	60 req / minute