Limits and guardrails

The platform is designed so that the safe path is the default path. This page is the honest fine print.

Published limits

240 requests per minute per credential. Exceeding it returns a 429 with a Retry-After header.
SQL results: up to 50,000 rows or 10 MB per response, 120 second query ceiling (60 by default). Paginate or chunk by date beyond that.
Access tokens are short-lived and refresh through the standard token endpoint. Amazon-side throttling surfaces as its own error kind so you can back off correctly.

These are generous for interactive use; if you hit them in an automation, batch your requests.

Scoped credentials

Every credential carries explicit permission scopes: account, retail, advertising, brand analytics, context, and timeline reads are separate grants, and the three write permissions (timeline, advertising, listings) are opt-in at mint time. Every call re-checks its scope, so a read-only credential cannot write no matter what the calling code (or the AI model behind it) asks for. Credentials can be rotated or revoked at any time.

Your data only

A credential resolves server-side to your own tenant database and your own authorized Amazon accounts. The isolation is structural, not a filter: there is no parameter that reaches anyone else's data.

Writes preview first

Advertising and listing writes validate, snapshot, and preview before anything is applied, and commits are audit-logged with the pre-write state. Listing commits replay exactly what was previewed and fail closed if anything drifted. See Work with live Amazon operations.

Predictable errors

Failures return a consistent envelope with a stable machine-readable kind (insufficient scope, throttled, merchant not found, and so on) plus a human-friendly message. Branch on the kind; show the message.