GitLab.com is tying rate limits to your subscription tier
Rate limits on GitLab.com are changing
Starting October 19, 2026, GitLab.com will apply rate limits based on subscription tier, with Free and unauthenticated requests first and Premium and Ultimate following in January 2027. Unauthenticated requests get 60 per hour per IP. GitLab says most users won't notice, but heavy automation may hit new ceilings. Authenticating moves requests to higher plan limits.
These limits are set so no single workload can slow the platform for everyone else.
- bob1029
If you are using LLMs to interact with sites like GitLab and GitHub, and you have the option to use a GraphQL API, you should jump on it immediately.
GraphQL is absolutely terrible for human developers to interact with, but it's like Facebook could see into the future back in 2012. I cannot imagine a more perfect API surface for agents. With the REST API on GitHub, you can consume maybe 10 issue JSON blobs before your context window is blown out. With GraphQL constraining the results you can easily read hundreds in the same token budget.
Additionally, the # of requests your agents need to make can be reduced in many cases since GraphQL can join across types whereas REST APIs cannot. You essentially get savings in two dimensions here. Quota and raw token volume per logical response.
- solatic
Important buried context: 60/hour unauthenticated, but 5,000/hour on the free plan.
60/hour sucks. 5000/hour (a little more than one per second) is totally fine.
I'm chalking this up alongside Docker's decision to restrict unauthenticated pulls. Unauthenticated anything went the way of the dodo some time ago. If you want unauthenticated access, go run your own mirror.
- cush
Providing kickbacks to the repos being scraped would be a good way to help fund open source projects and pay creators like streaming services do. Seems like they're headed in this direction - it would be a massive product differentiator over GH
- demibabs
Damn, we’re even having Claude write important press releases now
- Tatendaz
im self hosted so im somewhat safe i guess
- ddtaylor
> A request that arrives with no credentials gets 60 requests per hour per IP address.
One request per minute.
- tempest_
I assume this is because of LLM scraping.
- rkagerer
60 requests per hour per IP if you haven't signed in... well that's unfortunately low.