See engineer-man/piston#244 https://auth0.com/docs/policies/rate-limit-policy There is a semi-standardized way to provide the consuming client with the rate limit information.