rate_limit API response

Hello,

I noticed recently that the response of the rate_limit API has a new JSON object with the key “integration_manifest” as below. However, when I hit an API without a token in the URL, the core “remaining” number decreases. If I use a token in the URL, none of the counters decrease , as if there is no limit?

Did that change recently? Because if I’m not mistaken, API calls with a token have a limit of 5000 calls per hour, while calls without a token have a limit of 60 calls per hour.

I couldn’t find any reference to this JSON object in the rate_limit API documentation, neither on Google.

{
  "resources": {
    "core": {
      "limit": 60,
      "remaining": 48,
      "reset": 1550513382
    },
    "search": {
      "limit": 10,
      "remaining": 10,
      "reset": 1550510604
    },
    "graphql": {
      "limit": 0,
      "remaining": 0,
      "reset": 1550514144
    },
    " **integration\_manifest**": {
      "limit": 5000,
      "remaining": 5000,
      "reset": 1550514144
    }
  },
  "rate": {
    "limit": 60,
    "remaining": 48,
    "reset": 1550513382
  }
}

Hey @alhaddad-nasry 👋

The integration_manifest resource is indeed new and the counter will only decrease when this endpoint is invoked as part of the app manifest flow, which is detailed here: https://developer.github.com/apps/building-github-apps/creating-github-apps-from-a-manifest/

Because if I’m not mistaken, API calls with a token have a limit of 5000 calls per hour, while calls without a token have a limit of 60 calls per hour.

That’s correct!

If I use a token in the URL,  none of the counters decrease , as if there is no limit?

After having made this API call with a token, are you also using that same token in your API call to [https://api.github.com/rate\_limit](https://api.github.com/rate_limit) ?

The rate_limit endpoint returns the rate limit information for the token that it was invoked with, so if you navigate to the URL in your browser (without a token) it’ll show the unauthenticated rate limit (60 per hour for core). Whereas if you make an authenticated API call to this endpoint with your token, you will see the rate_limit specific  to your token (5000 req/hour for core) :grinning:

I hope this helps!