Skip to main content
Run admission applies an HTTP envelope limit, versioned JSON request bounds, per-minute rate limiting, and an optional organization monthly run cap.

Request bounds

The released engine configuration may lower or raise the effective JSON bounds within the platform ceilings. A zero or omitted configuration value inherits the platform default. The first deterministic violation is returned before run creation, cap reservation, queue insertion, or provider access.
The details object always contains bound, path, limit, and actual.

Requests per minute

Engine-scoped routes use the engine’s configured RPM when it is non-zero. Other public routes, and engines without an override, use the organization default. A rejected request returns:
The response is 429 and includes Retry-After in seconds. If the rate-limit backend is unavailable, request processing currently continues and the degraded enforcement interval is recorded operationally. The monthly cap below remains the atomic admission backstop when configured.

Monthly run cap

Every successfully created run reserves one unit in the current UTC calendar month. Live, sandbox, and deterministic fixture runs use the same organization cap. Concurrent admission performs the cap check and reservation in the run creation transaction. At the configured limit, the API creates no run and returns 429:
Existing organizations without a configured cap are uncapped. Partner credentials are issued only after an explicit launch cap and RPM are set.

Provider and output declarations

Released configs can declare max_provider_calls up to 100 and max_output_tokens up to 1,000,000. The configuration validator accepts zero as not yet enforced. These declarations do not replace the admission controls above, and a launch contract must state the actual configured values before credentials are issued.

Escalation

To request a limit change, contact support@usenexio.com with the environment slug, engine slug, expected peak RPM, expected monthly run count, and the relevant run_id or error timestamp. Do not retry a monthly-cap error in a tight loop.