RLCL API
Retired
The Rate Limit Control List is retired as of 2026.09: the gateway no longer evaluates it. Existing lists were migrated automatically to typed Limit Plans and assignments at upgrade — see Legacy Limits Migrated at Upgrade. Every write now returns 400 with a resultMessage naming the retirement (error key credentialRateLimit.retired): Create RLCL, Update RLCL, and all of the Credential, Endpoint and Condition management endpoints below. Only List RLCLs, Get RLCL, and Delete RLCL still work — read and delete stay available for audit and cleanup.
Endpoints
CRUD Operations
- List RLCLs - List all RLCLs of a project
- Get RLCL - Get the full configuration of a single RLCL
- Create RLCL - Create a new RLCL
- Update RLCL - Update an existing RLCL
- Delete RLCL - Delete an RLCL
Credential Management
- Add Credentials - Add credentials to an RLCL
- Update Credentials - Replace all credentials in an RLCL
- Delete Credentials - Remove credentials from an RLCL
Endpoint Management
- Add Endpoints - Add API endpoints to an RLCL
- Update Endpoints - Replace all endpoints in an RLCL
- Delete Endpoints - Remove endpoints from an RLCL
Condition Management
- Add Condition - Add condition to an RLCL
- Update Condition - Update condition in an RLCL
- Delete Condition - Remove condition from an RLCL
Authentication
All endpoints require authentication using a Personal API Access Token.
Permissions
GET Operations (List RLCLs, Get RLCL)
- User must have
IDENTITY+VIEWpermission in the project
POST/PUT/DELETE Operations (Create/Update/Delete RLCL, Manage Credentials/Endpoints/Conditions)
- User must have
IDENTITY+MANAGEpermission in the project
Permission Requirements
| Operation | Required Permission |
|---|---|
| List RLCLs / Get RLCL | IDENTITY + VIEW |
| Create/Update/Delete RLCL | IDENTITY + MANAGE |
| Add/Update/Delete Credentials | IDENTITY + MANAGE |
| Add/Update/Delete Endpoints | IDENTITY + MANAGE |
| Add/Update/Delete Conditions | IDENTITY + MANAGE |
Related Documentation
- Authentication Guide - How to obtain and use API tokens
- Error Handling - Error response formats