User guide

Quotas and limits

What a quota measures, when it resets, and what happens on breach.

What is measured

A quota caps one of: input tokens, output tokens, spend, or request count. It applies to a person, a team, or a service token, optionally narrowed to one model or managed model. A team’s quota counts only requests made while working under that team (a team token or the Working under selector).

Prompt-cache writes count toward spend quotas at the cache-write rates, but not toward input-token quotas.

When several quotas apply at once they combine with AND — the most restrictive one decides.

Windows

Calendar windows (per day, per week, per month) reset on UTC boundaries. Rolling windows (24 hours, 7 days, 30 days) slide continuously, so the oldest usage drops out as time passes.

On breach

You are warned at 80% and again at 95% by default; an administrator can configure different warning percentages per quota rule. Warnings for a personal quota go to you; warnings for team and service-token quotas, and every breach, go to administrators. When the limit is reached, the next request is refused with HTTP 429 and a reset_at timestamp. For rolling windows reset_at is the latest time; capacity comes back gradually as older usage leaves the window.

By default a request already in flight is allowed to finish, and the overage is recorded — which is why administrators are advised to set limits with headroom. A quota can instead be set to hard-kill; while any hard-kill quota applies to a request, its stream is cut as soon as any of your limits is crossed.

{
  "error": {
    "message": "Your per day quota of 1000000 input tokens has been used up. Access resumes at 2026-08-16T00:00:00Z.",
    "code": "policy.quota_exceeded",
    "type": "rate_limit_error",
    "reset_at": "2026-08-16T00:00:00Z",
    "retry_after": 34200
  }
}