Limits - Naïve

GET /v1/limits?tenant=<tenant_user_id>

Two real ceilings, two absent ones, the tenant’s budget, and the four honesty facts.

{
  "snapshot": { "notAfter": null },
  "grant": { "maxUntil": null },
  "snapshot_unavailable_because": "no snapshot lifetime is configured or enforced in this build",
  "grant_unavailable_because": "no grant lifetime is configured or enforced in this build",
  "pagination": {
    "max_limit": 200,
    "cursor": "opaque base64url keyset",
    "offset": "not supported"
  },
  "budget": { "capCents": 5000, "period": "month", "hard": true },
  "surface_honesty": {
    "idempotency": {
      "backend": "in-process Map",
      "shared_across_replicas": false,
      "caches_5xx": true,
      "body_fingerprint": false,
      "note": "…"
    },
    "revocation_on_reads": { "enforced": false, "note": "…" },
    "connections": { "mode": "open", "toolkits": "all", "governed_tools": 0, "note": "…" },
    "deprecation_headers": { "verified_at_edge": false, "note": "…" }
  }
}

The ceilings that are real

Ceiling	Value
`pagination.max_limit`	`200` — every list on the runtime, governance and brain surfaces
`pagination.cursor`	opaque base64url keyset. Treat it as a token; do not construct one.
`pagination.offset`	not supported anywhere on these surfaces

The ceilings that are not configured

snapshot.notAfter and grant.maxUntil are reported as null. A ceiling reported as a number nobody set is worse than a ceiling reported as absent, so these are null with the reason beside them.

🔴 `surface_honesty` — read this before you rely on any of the four

This block exists because four mechanisms in the product carry names that promise more than they do. All four are printed, or none.

`idempotency`

{ "backend": "in-process Map", "shared_across_replicas": false, "caches_5xx": true, "body_fingerprint": false }

Three separate defects, each of which breaks a different assumption:

not shared across replicas — a retry that lands on a different instance executes again. Idempotency-Key does not give you exactly-once on this API.
caches 5xx — a request that failed with a server error is replayed from cache on retry, returning the failure instead of retrying it.
no body fingerprint — the same key with a different body returns the first response. Reusing a key by accident silently returns the wrong answer.

Until this is a shared table with a body fingerprint and a 2xx-only filter, no new endpoint advertises idempotency and no MCP tool sets idempotentHint.

`revocation_on_reads`

{ "enforced": false }

The active-profile check runs only for mutating methods. Revoking an operator stops its writes immediately; its reads keep answering. If you revoke a credential for a security reason, rotate the key as well.

`connections`

{ "mode": "open", "toolkits": "all", "governed_tools": 0 }

Both AccountKit creation paths hardcode mode: "open", which omits the toolkit list entirely. Every toolkit and every tool in it is reachable by a connected agent. The engine implements per-toolkit and per-tool filtering in full; it is inert because no kit ever names a toolkit. See connection policy.

`deprecation_headers`

{ "verified_at_edge": false }

Deprecation, Sunset and Link may be stripped by the CDN before they reach your client. Do not build a client that depends on seeing them; the openapi deprecated: true mark is the channel with an in-repo proof.

`budget`

The tenant’s AccountKit budget, or null. hard: true means the cap is reserved atomically before the action executes; hard: false means it escalates to approval. See Spend.

{ "snapshot": { "notAfter": null }, "grant": { "maxUntil": null }, "snapshot_unavailable_because": "no snapshot lifetime is configured or enforced in this build", "grant_unavailable_because": "no grant lifetime is configured or enforced in this build", "pagination": { "max_limit": 200, "cursor": "opaque base64url keyset", "offset": "not supported" }, "budget": { "capCents": 5000, "period": "month", "hard": true }, "surface_honesty": { "idempotency": { "backend": "in-process Map", "shared_across_replicas": false, "caches_5xx": true, "body_fingerprint": false, "note": "…" }, "revocation_on_reads": { "enforced": false, "note": "…" }, "connections": { "mode": "open", "toolkits": "all", "governed_tools": 0, "note": "…" }, "deprecation_headers": { "verified_at_edge": false, "note": "…" } } }

​The ceilings that are real

​The ceilings that are not configured

​🔴 surface_honesty — read this before you rely on any of the four

​idempotency

​revocation_on_reads

​connections

​deprecation_headers

​budget