RLCL API

Retired

The Rate Limit Control List is retired as of 2026.09: the gateway no longer evaluates it. Existing lists were migrated automatically to typed Limit Plans and assignments at upgrade — see Legacy Limits Migrated at Upgrade. Create RLCL and Update RLCL now always return 400 with a resultMessage naming the retirement (error key credentialRateLimit.retired). List RLCLs, Get RLCL, and Delete RLCL are unaffected — read and delete stay available for audit and cleanup.

Endpoints

CRUD Operations

• List RLCLs - List all RLCLs of a project
• Get RLCL - Get the full configuration of a single RLCL
• Create RLCL - Create a new RLCL
• Update RLCL - Update an existing RLCL
• Delete RLCL - Delete an RLCL

Credential Management

• Add Credentials - Add credentials to an RLCL
• Update Credentials - Replace all credentials in an RLCL
• Delete Credentials - Remove credentials from an RLCL

Endpoint Management

• Add Endpoints - Add API endpoints to an RLCL
• Update Endpoints - Replace all endpoints in an RLCL
• Delete Endpoints - Remove endpoints from an RLCL

Condition Management

• Add Condition - Add condition to an RLCL
• Update Condition - Update condition in an RLCL
• Delete Condition - Remove condition from an RLCL

Authentication

All endpoints require authentication using a Personal API Access Token.

Permissions

GET Operations (List RLCLs, Get RLCL)

• User must have IDENTITY + VIEW permission in the project

POST/PUT/DELETE Operations (Create/Update/Delete RLCL, Manage Credentials/Endpoints/Conditions)

• User must have IDENTITY + MANAGE permission in the project

Permission Requirements

Operation	Required Permission
List RLCLs / Get RLCL	IDENTITY + VIEW
Create/Update/Delete RLCL	IDENTITY + MANAGE
Add/Update/Delete Credentials	IDENTITY + MANAGE
Add/Update/Delete Endpoints	IDENTITY + MANAGE
Add/Update/Delete Conditions	IDENTITY + MANAGE

Related Documentation

• Authentication Guide - How to obtain and use API tokens
• Error Handling - Error response formats