Set a tenant's limits
const url = 'https://example.com/v1/system/tenants/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/limits';const options = { method: 'PUT', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"apiRequestsPerMinute":1,"webhookReceivesPerMinute":1,"runsAtOnce":1,"runsPending":1,"toolCallsInFlight":1,"approvalsPending":1,"projectsInProduction":1}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request PUT \ --url https://example.com/v1/system/tenants/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/limits \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "apiRequestsPerMinute": 1, "webhookReceivesPerMinute": 1, "runsAtOnce": 1, "runsPending": 1, "toolCallsInFlight": 1, "approvalsPending": 1, "projectsInProduction": 1 }'Replaces the tenant’s limits with exactly these: a limit left out isn’t set, and isn’t enforced. Each is a whole number from 1 to 1000000. The tenant reads them on GET /v1/tenant. Takes system:tenants:limits. A closing tenant is frozen: 409 tenant-closing.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”The tenant’s id.
Header Parameters
Section titled “Header Parameters”Caller-supplied idempotency key, scoped to the caller: the same key from someone else in the tenant is their own request (from 0.1.5). Retries with the same key return the original response byte-identical (per docs/API-ROUTE-CONVENTIONS.md §3.1). A retry sent while the first request still runs is answered 409 idempotency-key-in-flight with Retry-After, on a runtime whose store holds keys (from 0.1.5); retry after it, and you get the first request’s answer. An answer that carries a secret (a new API key or public run token, a session token, a generated signing secret) isn’t kept: a retry gets 409 idempotency-key-replay-withheld, with the first request’s status and when it succeeded (from 0.1.5).
Request Bodyrequired
Section titled “Request Bodyrequired”The tenant’s limits that are set. A limit that isn’t set is absent, and isn’t enforced.
object
API requests a minute. Past it: 429 rate-limit-exceeded.
Webhook deliveries received a minute, across the tenant’s triggers. Past it: 429.
Runs executing at once. Past it, a new run waits as pending.
Runs waiting as pending. Past it, a new run is refused with 429.
Tool calls in flight to the tenant’s pack services. Past it, a call waits for a slot.
Approvals waiting for a decision. Past it, the step that asks fails, naming the limit.
Projects in production at once. Past it, putting another project in production is refused with 403 production-limit-reached. Lowering it takes no project out of production.
Examplegenerated
{ "apiRequestsPerMinute": 1, "webhookReceivesPerMinute": 1, "runsAtOnce": 1, "runsPending": 1, "toolCallsInFlight": 1, "approvalsPending": 1, "projectsInProduction": 1}Responses
Section titled “Responses”The tenant’s limits now.
object
The tenant’s limits that are set. A limit that isn’t set is absent, and isn’t enforced.
object
API requests a minute. Past it: 429 rate-limit-exceeded.
Webhook deliveries received a minute, across the tenant’s triggers. Past it: 429.
Runs executing at once. Past it, a new run waits as pending.
Runs waiting as pending. Past it, a new run is refused with 429.
Tool calls in flight to the tenant’s pack services. Past it, a call waits for a slot.
Approvals waiting for a decision. Past it, the step that asks fails, naming the limit.
Projects in production at once. Past it, putting another project in production is refused with 403 production-limit-reached. Lowering it takes no project out of production.
How much of each limit that counts something the tenant uses now, whether the limit is set or not: on GET …/limits only, and only from a runtime that counts it. A limit can be lowered below it: nothing is taken back, and the next one waits until the count is under the limit.
object
The tenant’s projects in production.
Examplegenerated
{ "tenantId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "limits": { "apiRequestsPerMinute": 1, "webhookReceivesPerMinute": 1, "runsAtOnce": 1, "runsPending": 1, "toolCallsInFlight": 1, "approvalsPending": 1, "projectsInProduction": 1 }, "inUse": { "projectsInProduction": 1 }}Malformed request body.
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}Missing / malformed / expired / revoked bearer token.
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}A tenant’s key or session (system-principal-required), or a system key without system:tenants:limits (system-scope-missing).
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}No tenant with that id, or a purged one (tenant-not-found).
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}The tenant is closing (tenant-closing); or an Idempotency-Key reused with another body.
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}The request body is over the API’s limit (request-too-large; details.maxBytes says how much).
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}Server error (unmapped domain code or framework crash).
object
object
Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).
Optional, kind-specific.
object
Server-assigned request id; also echoed via X-Request-Id header.
Examplegenerated
{ "error": { "code": "example", "message": "example", "details": {}, "requestId": "example" }}See also
GET /v1/system/tenants/{tenantId}/limits: Read a tenant's limitsGET /v1/system/tenants: List tenantsPOST /v1/system/tenants: Create a tenantGET /v1/system/tenants/{tenantId}: Read a tenant- Serve many tenants
- Organize work by org and project
- Error code
request-too-large - Error code
system-principal-required - Error code
system-scope-missing - Error code
tenant-closing - Error code
tenant-not-found - Every error code