specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: eu-open-data-portal
providerId: eu-open-data-portal
created: '2026-05-04'
modified: '2026-09-07'
generated: '2026-09-07'
method: probed
source: >-
  Live response headers from https://data.europa.eu/api/hub/search/vocabularies and
  https://data.europa.eu/api/hub/search/search (2026-09-07), plus a documentation search across
  https://dataeuropa.gitlab.io/data-provider-manual/api-documentation/, /faq/ and
  https://data.europa.eu/en/faq
limit_count: 0
tags: [Rate Limiting, Quotas, Throttling]
description: >-
  No rate limit is published for any data.europa.eu API, and none is signalled at runtime. Response headers
  observed on live unauthenticated calls were: server, content-type, content-length, date,
  access-control-allow-origin, strict-transport-security, x-content-type-options, x-xss-protection and the
  CloudFront cache headers (x-cache, x-amz-cf-pop, x-amz-cf-id, via). There is no X-RateLimit-*, no
  RateLimit-*, no Retry-After and no documented quota, per key, per account or per endpoint. An agent
  integrating here has no backpressure signal other than HTTP status, and no published ceiling to design
  against. The service is fronted by CloudFront, so an abusive client would most likely meet an edge
  protection response rather than a documented API limit.
headers:
  limit: null
  remaining: null
  reset: null
  retryAfter: null
  policy: null
observed_headers:
- access-control-allow-origin
- strict-transport-security
- x-content-type-options
- x-xss-protection
- x-cache
- via
responseCodes:
  throttled: null
  quotaExceeded: null
limits: []
policies: []
notes:
- >-
  REPLACES A FABRICATED SCAFFOLD. Until this pass this file declared five invented limits — 10 req/min and
  1,000 req/month free, 100 req/min and 100,000 req/month "professional", 1,000 req/min "enterprise
  negotiated" — plus X-RateLimit-* headers the API does not send, all written by the 2026-05-04 bulk sweep and
  marked `method: generated`. An honest zero is the finding: the provider documents no limits.
maintainers: []