// docs / quotas & limits
Cuotathan is crìochan
Tha gach luach quota agus rate-limit gu h-ìosal air a tharraing bhon mhodal entitlements aig àm build, mar sin chan urrainn dhan duilleag seo gluasad air falbh bho na tha am frithealaiche a' cur an gnìomh dha-rìribh.
Entitlements gach ìre
| An-asgaidh | Cur-seachad | Pro | Unlimited | |
|---|---|---|---|---|
| Scans / mìos | 3 | 50 | 200 | Plana Unlimited¹ |
| Projects (domains verified) | 1 | 1 | 5 | 20 |
| Tokens API | 0 | 1 | 5 | 20 |
| Webhook endpoints | 0 | 1 | 5 | 20 |
| Probes gnìomhach | chan eil | tha | tha | tha |
| Scans repo GitHub | chan eil | chan eil | tha | tha |
| Ath-scans clàraichte | chan eil | chan eil | cadence ≥3h | ≥6h cadence |
| Lorg bagairtean beò | chan eil | chan eil | chan eil | tha |
| Sharable reports | chan eil | chan eil | tha | tha |
| Gleidheadh | 7 làithean | 30 làithean | 90 làithean | 365 làithean |
| Suidheachain sgioba | 1 | 1 | 1 | 5 |
| Taic | standard | standard | prìomhachais | coisrigte |
¹ The Unlimited plan's scan quota is subject to fair use — see Terms. ² The project cap defaults to 20 active-monitoring domains at ≥6h cadence. Contact support@fixvibe.app to raise it in exchange for a longer scheduled cadence.
Crìochan reata API
Tha gach request /api/v1/* agus /api/mcp keyed air hash den bearer token agus a' ruith tro dhà window:
- Burst: 10 requests gach diog.
- Steady: 60 requests gach mionaid.
- Per signed-in user: 30 scan submissions per 10 minutes — a soft cap above the per-plan monthly quota that absorbs bursts without exhausting the daily budget.
Air 429, tha an response a' gabhail a-steach:
HTTP/1.1 429 Too Many Requests
content-type: application/json
retry-after: 47
x-ratelimit-limit: 60
x-ratelimit-remaining: 0
x-ratelimit-reset: 1715116200
{
"error": "rate_limited",
"message": "Token rate limit exceeded — steady (60/min). Retry in 47s.",
"retry_after_seconds": 47
}Tha an window a tripped air ainmeachadh sa message (burst (10/s) vs steady (60/min)) gus an urrainn do client backoff atharrachadh.
Crìoch astair sganaidh a' phlana Free (gach IP/24)
On top of the per-org 3-scans-per-month cap, Free plan users face an additional per-IP/24 rate limit: 3 scans per rolling 24 hours per IP /24 block. The same limiter covers anonymous instant scans, which prevents farming Free quota through throwaway accounts on one IP. Requests exceeding the limit return HTTP 429 Too Many Requests with a Retry-After header.
Throttle clàraidh (per IP/24)
5 clàraidhean soirbheachail gach IP/24 gach 24 uair, gus casg a chur air cruthachadh fèin-obrachail cunntasan a' phlana Free. Bidh callbacks crìochnaichte ag ath-sheòladh gu /sign-in?error=rate_limited.
Gleidheadh
Auto-purge scans + findings a rèir a' chlàir gu h-àrd. Thig anonymous one-shot scans gu crìch 24h às dèidh cruthachaidh. Cumaidh audit logs airson 18 mìosan. Prune monitor snapshots gu na 7 làithean mu dheireadh plus am baseline as ùire gach (domain, signal). Purge dismissed alerts às dèidh 90 latha. Tha retention uile air a chur an gnìomh gach latha le /api/cron/retention-cleanup.
