From acd1526acf41a5d6b29e136f6dd12d6b41456d7a Mon Sep 17 00:00:00 2001 From: Hugh Brown Date: Tue, 3 Mar 2026 22:02:46 -0700 Subject: [PATCH] docs: update api.md to reflect require_user_or_agent rename Co-Authored-By: Claude Opus 4.6 --- docs/reference/api.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference/api.md b/docs/reference/api.md index 834504f8..8ba04066 100644 --- a/docs/reference/api.md +++ b/docs/reference/api.md @@ -45,7 +45,7 @@ Some endpoints are designed for autonomous agents and use an agent token header: X-Agent-Token: ``` -In the backend, these are enforced via the “agent auth” context. When in doubt, consult the route’s dependencies (e.g., `require_admin_or_agent`). +In the backend, these are enforced via the “agent auth” context. When in doubt, consult the route’s dependencies (e.g., `require_user_or_agent`). Agent authentication is rate-limited to **20 requests per 60 seconds per IP**. Exceeding this limit returns `429 Too Many Requests`.