Known limitations

Everything on this page is a real, current constraint. A documented gap is honesty; an undocumented one is a bug you found on your own.

OAuth tokens expire after 30 days
There is no refresh grant. Reconnecting requires the user to re-approve on the consent screen. MCP connections and custom clients are equally affected.
Rate limits (not yet enforced)
REST calls will be limited to 300 requests per 15 minutes per API key, with X-RateLimit-* response headers and a 429 when exceeded — matching the limiter already protecting OAuth token and registration calls today. Not enforced yet.
Claude is the only documented agent platform
Other agent walkthroughs are pending a reliable integration path. Any MCP-capable client can connect via the protocol docs today.

View example

Expired-token error

{
  "jsonrpc": "2.0",
  "id": 4,
  "error": {
    "code": -32001,
    "message": "Access token expired. Re-authorize the connection."
  }
}

OAuth tokens expire after 30 days