What is rate limiting?

Any public tool or endpoint needs one, for two reasons. The first is availability: without a cap, one automated script can consume the capacity everyone else needs. The second is cost, which matters when each request triggers real work such as a model call. A well-set limit is invisible to a genuine user and immediate for anything abusive, and it should say plainly what happened rather than failing silently.