Default 100 req/min per org. Burst up to 200 for 30s. AI endpoints have their own token-based quota.
Standard rate limit: 100 req/min/org. Each response includes X-RateLimit-Remaining + X-RateLimit-Reset headers. Hitting the limit returns 429 with Retry-After.
AI endpoints (/copilot/*, /ai-search/*) consume from your org's monthly token quota — the limit is tokens, not requests. Visible at Settings → AI → Usage.
POST /api/v1/auth/login → JWT bearer token. Send as Authorization: Bearer <token> on every request.
POST /api/v1/crm/contacts to create, GET /api/v1/crm/contacts/{id}, PATCH to update, DELETE to soft-archive.
Subscribe to 30+ event types: contact.created, deal.won, email.opened, sequence.replied, plan.changed.