---
title: "What this key may do, and what it can spend"
method: GET
path: "/v1/me/limits"
tags: ["Account"]
---

# What this key may do, and what it can spend

`GET /v1/me/limits`

## Request

- Base URL: `https://api.postlake.dev`
- URL: `https://api.postlake.dev/v1/me/limits`
- Auth: `bearerAuth` (a scheme the document does not define)

The authenticated key's machine identity, enforced publishing policy, connected channels, credit balance, and rate limits. rateLimits.apiPerMinute and postsPerMinute are the workspace ceiling. rateLimits.profile is the per-Channels-profile cap, so one end user cannot starve the others. Networks still apply their own caps (TikTok is about 6 requests a minute per account). MCP agents receive the same view through whoami. Read this before planning a batch rather than discovering a limit by being refused.

## Response `200`

Success

- object
  - `account` string
  - `email` string
  - `name` string
  - `credits` object
    - `total` integer
    - `monthly` integer
    - `pack` integer
    - `monthlyAllowance` integer
    - `plan` string
    - `blockedPlatforms` string[]
  - `billing` object: Billing state separate from the entitlement tier. `payg` means the Free plan with a positive balance of purchased, non-renewing credits, not a subscription.
    - `mode` 'free' | 'payg' | 'subscription', required
    - `isSubscriber` boolean, required
    - `hasPurchasedCredits` boolean, required
  - `connected` object[]
    - `account` string
    - `platform` string
    - `handle` string
    - `status` string
  - `rateLimits` object
    - `apiPerMinute` integer, required: Authenticated /v1 and /mcp requests per 60-second window for this workspace. The abuse ceiling shared by every profile.
    - `postsPerMinute` integer, required: POST /v1/posts, /v1/posts/{id}/publish, and MCP create_post / publish_draft per 60-second window for this workspace.
    - `profile` object, required: Per Channels profile (one end user). Applied when the request names profile or the post's accounts resolve to one.
      - `apiPerMinute` integer, required: Authenticated requests per 60-second window for this profile.
      - `postsPerMinute` integer, required: Publishes per minute for this profile. A noisy customer cannot spend the workspace envelope alone.

---

[API](https://skmtc.dev/postlake/apis/postlake-api.md) · [All operations](https://skmtc.dev/postlake/apis/postlake-api/llms.txt) · [OpenAPI document](https://skmtc.dev/postlake/apis/postlake-api/revisions/f81060e31f69?raw)