# Rate limit and allowances

Every authenticated `/v1` request counts towards the organization's `requests_per_minute` rate limit, including failed requests, `/v1/me/*` and paths without an operation: a `403`, a `404`, any other 4xx and a 5xx use up the minute like a served request. A caller without an organization (a user without a membership) has no organization limits and is paced by a default per-caller `requests_per_minute` instead. Once the minute is used up every request is `429 rate-limited` (`limit_kind` `requests_per_minute`) until that calendar minute ends, so a credential missing the operation's scope is answered `403 not-entitled` (`restriction` `scope`) only until then. The daily allowances (`requests_per_day` and any per-dataset allowance of the organization) are consumed by metered operations alone and never by a failed request; an exhausted one is `429 quota-exceeded`. `/v1/me/*` consumes no allowance, so `GET /v1/me/usage` reports every limit (`limits`) while the minute has room.