Source:equa-server/modules/api/src/endpoints/auth-endpoints.ts(registration IP limit),equa-server/modules/agent/src/endpoints/agent-endpoints.ts(agent guardrails)
Rate Limiting
The Equa API does not currently implement a global rate-limiting middleware. However, there are built-in safeguards on specific operations to prevent abuse.Existing Safeguards
Registration IP Limit
New account registrations are throttled by IP address.
The registration endpoint (
POST /v1/user) uses request-ip middleware to capture the client IP and enforce this limit.
Email Verification Cooldown
Re-sending verification emails is throttled to prevent abuse.Recommendations for API Consumers
Even without server-side rate limiting, clients should implement reasonable request patterns:- Avoid polling loops faster than once per second
- Debounce user-triggered searches and availability checks
- Cache responses where data does not change frequently (e.g., billing products, organization features)
- Use exponential backoff when retrying failed requests