Tokens and limits
A token belongs to one canvas. The token decides which canvas is served — never the URL — so a token pointed at the wrong slug gets a 403 rather than someone else’s work.
Scopes
| Scope | Plan | What it allows |
|---|---|---|
canvas:read | Pro | Read every zone on the canvas. |
canvas:write | Business | Submit proposals. Never writes directly — proposals go to an owner. |
history:read | Business | Read the change log and who approved what. |
Rate limits
Pro
600 / hour
Per token.
Business
5,000 / hour
Per token.
Enterprise
Agreed
Set per deployment.
Over-limit requests still count against the window, so an agent that hammers the endpoint slides its own reset forward rather than sitting exactly at the ceiling.
Errors
401revokedThe token was revoked or has expired. Issue a new one in canvas settings.403lockedThe token is for a different canvas, or the scope does not cover that tool.429slow_downOver the hourly limit. Retry-After says when the window resets.