{"perRequest":{"maxBodyBytes":5242880},"perBoard":{"maxTexts":500,"maxTextContentChars":100000,"maxImages":50,"maxImageBytesTotal":10485760,"maxImageBytesPerItem":900000,"maxStrokes":2000},"rateLimit":{"requests":60,"windowSeconds":10,"per":"boardId","appliesTo":["browser-ws","rest-reads","rest-mutations","mcp"],"enforcement":"Sliding window. Browser WebSockets are rate-limited inside the per-board BoardServer Durable Object — single-writer and strong. REST/MCP are rate-limited in the Worker isolate that happens to serve the request; because Cloudflare fan-outs traffic across many isolates (regions, colos, warm/cold starts), a caller who distributes load across isolates effectively bypasses this cap. Treat the REST/MCP budget as a soft per-isolate ceiling, not a strong global guarantee. Cloudflare's platform-level limits remain the hard wall."}}