Rate Limiting Is Not Authentication
The public machine API uses request throttling as abuse resistance while retaining Bearer validation as the real identity check.
The public machine API uses request throttling as abuse resistance while retaining Bearer validation as the real identity check.