API quotas prevent abuse (10K requests/hour per user). Higher tiers unlock more. Implemented via rate-limit middleware. For law firm sites, quota your own login endpoint — a hard limit at 10 attempts/hour per IP prevents brute-force takeover.
Quota
Also known as: rate limit