Yes, the API enforces per-key and per-IP rate limits, and can temporarily block an IP that exceeds abusive request patterns. If you're building an integration with high request volume, contact support to discuss limits.