Per-address limits on sign-in and API key creation
Requests that sign in or create an account are limited per client IP address (an IPv6 address counts by its /64): 30 an hour for POST /v2/sign-in/email, and 30 an hour for POST /v2/sign-in/email/verify and Google or SSO sign-in returns together. Creating or rotating API keys (POST /v2/keys, POST /v1/keys) is limited to 60 an hour. Each API server applies these limits on its own. A request over a limit returns 429 rate_limited with a Retry-After header giving the seconds until one more request is accepted; nothing is created, and the refused request does not count toward the limit. Accounts that already exist count the same as new ones.
Same day.
- Status incidents in the APIGET /v2/status/incidents returns the incident notes shown on withruntime.com/status, status.md and status.json, newest start first, as {"…
- Per-address limit on creating organizationsPOST /v2/orgs, which creates a signed-in person's own organization, is limited to 10 an hour per client IP address (an IPv6 address count…
- Closing an account deletes its resourcesPOST /v1/account:close now succeeds for every account; for some accounts it previously returned 500 internal_error.
- Cloud Run: Google's client libraries' $alt parameter is acceptedThe Google Cloud Run Admin API at /compat/google-cloud-run now accepts the $alt query parameter (json, or json;enum-encoding=int), which…
- Seven more launch checks through competitors' APIs on /status.jsonlaunch_checks on GET https://withruntime.com/status.json now also returns dev_environments_codespaces (Octokit, GitHub's SDK, against the…
- GET /v1/me returns the key's reachThe response now includes reach: agent when the key acts only on what its own agent made, compartment when it acts on what every key of i…
- A build whose identical image is larger than its maxImageMiB fails with the size to setWhen your account already had an identical image larger than a new build's build.maxImageMiB (8192 by default), the build failed with "Th…
- Clearer error when a sandbox from an image cannot startWhen the server could not prepare a sandbox's image, POST /v1/sandboxes returned 503 busy with "The cell could not confirm this in time;…
- Render environment variable endpoints for Apps/compat/render/v1 now serves Render's environment variable endpoints over an App's spec.env: list (GET /services/{serviceId}/env-vars, pa…
- Sandboxes, Apps and Functions can call App and Function addressesA request from a sandbox, an App or a Function to an App's or a Function's address (https://<name>.runtimehost.com) used to return 403 wi…
- Render list pagination reads only the requested pageOn /compat/render/v1, GET /services and GET /services/{serviceId}/deploys now start reading from the position the cursor names and stop a…
- Paused sandboxes started from a custom image survive the loss of their hostA paused sandbox started from your own image is no longer stopped when its host is lost, as long as its saved copy is complete and anothe…
- A wake whose host does not answer fails within about a minuteA paused sandbox whose host did not answer its wake used to stay in resuming for as long as the host stayed silent, and every request on…
- App versions and Render deploysGET /v2/apps/{id}/versions lists an app's versions, newest first and paginated by limit and cursor.