specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: BP
providerId: bp
created: '2026-05-04'
modified: '2026-09-04'
generated: '2026-09-04'
method: searched
source: https://developer.fleet.bp.com/DE/apis
note: >-
  REPLACES a 2026-05-04 scaffold that carried invented tier limits (10/min free, 100/min pro,
  1000/min enterprise) and an invented X-RateLimit-* header set. Every limit below is the value
  BP itself publishes on the product's catalogue entry in the bp Open Fleet developer portal,
  quoted verbatim in `published_as`.
tags:
  - Energy
  - Oil
  - Gas
  - Fleet
  - Rate Limiting
description: >-
  Published rate limits for the six bp Open Fleet APIs. BP states a limit per API product. It
  does NOT publish rate-limit response headers, a throttling status code, burst allowances or
  Retry-After semantics, so a client can read the ceiling in advance but cannot observe its
  remaining budget at runtime.
limit_count: 6
headers:
  limit: not published
  remaining: not published
  reset: not published
  retryAfter: not published
  policy: not published
  note: >-
    No RateLimit-* or X-RateLimit-* header is documented anywhere in the portal or declared in
    any of the six OpenAPI documents.
responseCodes:
  throttled: not published
  note: >-
    No 429 response is declared on any of the 14 published operations. The status code returned
    on exhaustion is undocumented.
limits:
  - api: Aral AppConnect (Pay@Pump)
    product_code: FLEETPAYATPUMT_1.0
    scope: api-product
    metric: requests_per_second
    limit: 100
    published_as: 100 requests / second
    countries: [DE]
  - api: Retail Site Information
    product_code: FLEETCORE-SITE_1.0
    scope: api-product
    metric: requests_per_second
    limit: 100
    published_as: 100 Request per Second
    countries: [AT, BE, DE, LU, NL, PL, PT, ES, UK]
  - api: Authentication
    product_code: FLEET_AUTHENTICATION_1.0
    scope: api-product
    metric: requests_per_minute
    limit: 10
    published_as: 10 requests / minute
    countries: [DE]
    note: >-
      The token endpoint is the tightest limit on the platform at 10/min, which effectively
      requires clients to cache and reuse the access token rather than fetch one per call.
  - api: Card Management
    product_code: FLEET_CARD_MANAGEMENT_1.0
    scope: api-product
    metric: requests_per_minute
    limit: 10
    published_as: 10 requests / minute
    countries: [AT, BE, DE, LU, NL, PL, PT, ES, UK]
  - api: Invoice Management
    product_code: FLEET_INVOICE_MANAGEMENT_1.0
    scope: api-product
    metric: requests_per_minute
    limit: 10
    published_as: 10 requests / minute
    countries: [AT, BE, DE, LU, NL, PL, PT, ES, UK]
  - api: Transaction Management
    product_code: FLEET_TRANSACTION_MANAGEMENT_1.0
    scope: api-product
    metric: requests_per_minute
    limit: 10
    published_as: 10 requests / minute
    countries: [AT, BE, DE, LU, NL, PL, PT, ES, UK]
gaps:
  - No published burst allowance.
  - No published quota (daily/monthly) — only a rate.
  - No published per-key vs per-account distinction; the limit is stated per API product.
  - No documented backoff guidance.
maintainers:
  - FN: Kin Lane
    email: info@apievangelist.com