Configurable Rate Limiting
Per-IP request rate limiting protects the API from abuse.
- A default limit of 10 requests/second per IP, configurable via RATE_LIMIT_PER_SECOND
- Requests over the limit receive a standard HTTP 429 response
- Adjustable per deployment through the Settings API