429 with a Retry-After header.
What you get back
How to handle it
- Read the
Retry-Afterheader (seconds) and wait that long before retrying. - Use exponential backoff with jitter for repeated
429s. - Cache your access token and reuse it until close to expiry rather than re-issuing on every call.
Specific rate limits are not yet published.