Rate limits
Monthly per-plan quotas, the 429 response, and the unlimited convention.
Usage is metered against your plan's monthly quotas, which reset on the 1st of each month.
Quotas
api— API calls: the proxy, connections endpoints, sync triggers, and action execution.webhook— inbound webhook events.
Each plan sets max_api_calls_monthly and max_webhook_events_monthly. A limit of -1 (negative)
means unlimited — the convention used throughout Nolixan for "no limit."
When you exceed a quota
Requests over the limit return:
Every metered response also carries usage headers so you can track headroom:
Only successful (2xx) responses are counted — failed requests don't consume quota. Allowance is checked before the request runs and incremented after it succeeds. Plans with overage enabled may exceed the limit, with the excess reconciled at billing.
Auth throttling
Separately from quotas, auth and invite endpoints have an IP-based abuse throttle that's always enforced — this protects against credential-stuffing and is independent of your plan.