List Rate Limit Policies

GET /environments/{env_id}/rate_limits

List Rate Limit Policies

List rate limit policies in an environment. Pagination is opt-in: omit page_size to get the full policy list in one response. page is only meaningful together with page_size and is rejected without it.

Parameters

• env_id (path, string, required): Environment ID that scopes the request.

• scope (query, string, optional): Return only classic-form policies with the given scope. Accepts the same values as the policy scope field.

• dimension (query, string, optional): Return only policies involving the given dimension — referenced by a condition leaf or group_by entry, or (for classic-form policies) implied by the scope (team_member involves team and member).

• q (query, string, optional): Case-insensitive substring search over the policy name.

• page (query, integer, optional): 1-based page number. Requires page_size on the same request.

• page_size (query, integer, optional): Page size. Values above 200 are clamped to 200. Omit to return the full list.

Responses

• 200: OK

• data (array, required): Rate limit policies, oldest first.

• data[].id (string, required): Rate limit policy ID.

• data[].env_id (string, required): Environment ID that owns this policy.

• data[].name (string, required): Human-readable policy name.

• data[].scope (object, required):

• allOf variant 1

• data[].scope_ref (string, required): ID of the resource the policy applies to, matching scope: a caller API key ID, model ID, team ID, or member ID. team_member policies reference a team ID. Fixed at creation. null on conditional-form policies.

• data[].window (object, required):

• allOf variant 1

• data[].max_requests (integer, required): Maximum number of requests allowed per window. null when the policy has no request cap.

• data[].max_tokens (integer, required): Maximum total tokens consumed per window. null when the policy has no token cap.

• data[].schedules (array, required): Recurring suspension windows: while the current time falls in any listed window the gateway skips this policy, and enforcement resumes automatically afterwards. Empty when the policy is always enforced. Present on both policy forms.

• data[].schedules[].timezone (string, required): IANA timezone the wall-clock fields are interpreted in (e.g. Asia/Shanghai).

• data[].schedules[].days_of_week (array, optional): Weekly selector: the window opens on each listed day. Mutually exclusive with dates.

• data[].schedules[].dates (array, optional): Explicit calendar dates (YYYY-MM-DD, in timezone) the window opens on — for holidays and other irregular days. Mutually exclusive with days_of_week.

• data[].schedules[].start_time (string, required): Window start, HH:MM wall clock (inclusive).

• data[].schedules[].end_time (string, required): Window end, HH:MM wall clock (exclusive); 24:00 means end of day. Must differ from start_time; an end before the start crosses into the following day.

• oneOf variant 1

• oneOf variant 2

• data[].conditions (array, optional): Condition node tree the request must satisfy (top-level nodes combine as AND; an empty list matches every request in the environment). Conditional form only.

• data[].conditions[].dimension (string, optional): Request dimension a condition leaf matches on. Identity dimensions carry resource UUIDs (team, member, api_key, model) and admit the equality/set operators; the string dimensions model_name (model display name) and provider additionally admit the regex operators.

model and model_name match the dispatched model and — when the caller addressed a routing group, semantic router, or ensemble — the addressed parent as well. Either identity satisfies a positive operator (==/in/regex): a group's own id selects every request routed through it, and a member's id selects that member whether called directly or through a group. ~= is true only when BOTH identities differ (preserving a ~= b = !(a == b)), and negate inverts the combined leaf result — so a negated in excludes a request when either identity is listed, and negate + ~= matches when either identity equals the value.

• data[].conditions[].operator (string, optional): Condition operator, mirroring lua-resty-expr tokens. ==/~= compare equal/not-equal, in tests list membership, ~~/~* are case-sensitive/insensitive regexes (string dimensions only). has, the numeric comparisons and ipmatch are reserved for future dimensions and rejected on every current one.

• data[].conditions[].negate (boolean, optional): Invert the leaf (lua-resty-expr !, e.g. negate + in = "not in") or the group (!AND / !OR). A request missing the leaf's dimension matches neither the condition nor its negation.

• data[].conditions[].value (object, optional): Comparison value: in takes 1–64 strings, every other operator a single string. Identity dimensions take resource UUIDs; model_name takes display-name strings or (for ~~/~*) a regex of at most 256 characters; provider takes provider catalog ids.

• oneOf variant 1

• oneOf variant 2

• data[].conditions[].logic (string, optional): Group combinator — lua-resty-expr AND / OR.

• data[].conditions[].children (array, optional): Nested condition nodes (group shape only).

• data[].group_by (array, optional): Dimensions the counters split on; empty = one shared bucket for every matched request. Conditional form only.

• data[].limits (object, optional): Conditional-form limits — the same 7-field shape as the inline model / API-key rate limits. At least one field must be set.

• data[].limits.rps (integer, optional): Requests per second.

• data[].limits.rpm (integer, optional): Requests per minute.

• data[].limits.rph (integer, optional): Requests per hour.

• data[].limits.rpd (integer, optional): Requests per day.

• data[].limits.tpm (integer, optional): Total tokens per minute.

• data[].limits.tpd (integer, optional): Total tokens per day.

• data[].limits.concurrency (integer, optional): Maximum concurrent in-flight requests. Capped at the data plane's 32-bit counter range.

• data[].action (string, optional): What the policy does past its limits. Only reject (HTTP 429) is available; the field reserves the enum for future actions.

• data[].created_at (string, required): Time when the policy was created.

• data[].updated_at (string, required): Time when the policy was last updated.

• total (integer, optional): Total number of matching policies across all pages.

• page (integer, optional): Current 1-based page.

• page_size (integer, optional): Effective page size after clamping.

• 400: Request body or parameters failed validation.

• error (object, required): Error details.

• error.code (string, required): Machine-readable identifier. Examples: UNAUTHENTICATED, INVALID_REQUEST, MASTER_KEY_UNSET, INTERNAL.

• error.message (string, required): Human-readable explanation; safe to surface to operators.

• 401: Missing or invalid bearer. Response fields (application/json): identical to GET /environments/{env_id}/rate_limits, response 400 above.

• 404: Resource not found. Response fields (application/json): identical to GET /environments/{env_id}/rate_limits, response 400 above.

cURL

curl -X GET '$AISIX_CP/environments/{env_id}/rate_limits' -H 'Authorization: Bearer $AISIX_TOKEN'