Storefront rate limiting

Direct Storefront API requests now have client-aware rate limits and response headers.

Storefront API requests using X-Scalev-Storefront-Api-Key or
X-Scalev-Guest-Token are rate-limited as direct client/browser requests.
Machine-authenticated business requests continue to be rate-limited per
API key or OAuth installation. Rate-limit metadata is returned in
X-Ratelimit-* headers.