Limits, lifetimes and developer filters Free & Pro

Rate limits

When an agent goes over a limit, the store answers 429 Too Many Requests with a Retry-After header.

What	Limit
Calls to the agent API and MCP server	300 a minute per visit
Token requests	120 a minute per IP address
New visits by one agent	3,000 an hour
New visits by one agent user	120 an hour
Agents the store has never seen	20 an hour per IP address, 200 an hour store-wide
Wrong device codes	10 per account per 10 minutes

Lifetimes

What	Lasts
A customer’s approval	90 days from when they allow it
An agent’s visit (Session)	30 days without use; each use extends it
A Session Token	1 hour (the agent renews it)
A sign-in code (by link)	2 minutes
A device code	10 minutes
A checkout link	30 minutes, once
An operation’s terms (Pro)	15 minutes
Agent events	90 days

Filters

For developers, in a small plugin or your theme’s functions.php. Each is a standard WordPress filter.

Filter	Changes
agentadapt_rate_limit	Any rate limit above (return 0 to switch one off)
agentadapt_account_token_lifetime	How long an approval lasts (at least 1 hour)
agentadapt_eligible_roles, agentadapt_ineligible_caps	Which accounts can connect
agentadapt_signin_types	Offer only sign-in by link, or only by code
agentadapt_scope_descriptions	The words customers see on the approval page
agentadapt_expose_hidden_products	Let agents see catalogue-hidden products (off by default)
agentadapt_event_retention_days	How long events are kept (0 records none)
agentadapt_attribution_fallback	Whether to record order attribution when the browser didn’t
agentadapt_public_origin	Your store’s public address, if a proxy hides it

Pro adds agentadapt_operation_ttl, agentadapt_paid_cancel_statuses (default: Processing), agentadapt_return_statuses (default: Completed), agentadapt_return_window_days, agentadapt_abandon_hours and agentadapt_mcp_origins.

Changing these changes what your store promises agents. Keep the defaults unless you have a reason.