Rate limits
Limits are per client, over a sliding one-minute window:
| Client | Limit |
|---|---|
| Anonymous (per IP) | 60 requests / min |
| Signed-in website session | 300 requests / min |
| API key | 600 requests / min per key (moderators can change it per key) |
Some actions have their own limits on top:
| Action | Limit |
|---|---|
| Uploads | by volume: 5 GB per 24 hours for authors, 20 GB for trusted authors (site settings); over it 429 upload_volume_exceeded with limitBytes and usedBytes. A flood guard of 100 started uploads an hour stays (upload_rate_limited) |
AI help for mod pages (POST /mods/assist) | 10 / day |
| Audio previews | 20 uploads / day |
| Comments | 5 / min, 100 / day |
| Game suggestions | 5 / day |
| Webhook test pings | 10 / min per webhook |
Headers
Every response carries:
RateLimit-Limit— requests allowed in the window.RateLimit-Remaining— requests left.RateLimit-Reset— seconds until a request frees up.
Over the limit → 429 with code: "rate_limited" and Retry-After (seconds). Wait that long, then retry; back off exponentially if it keeps happening.
Downloads
GET /files/{id}/download counts the download and answers 302 to a signed link on https://dl.glitchmug.com (valid 6 hours): the bytes come from there, outside Cloudflare. Follow redirects in your client. Guests are limited to 2 MB/s; signed-in users, API keys and mod managers with a client key are not.