# Authentication for BuildYourLaunch

The public API (https://buildyourlaunch.com/api/v1) and MCP server (https://buildyourlaunch.com/api/mcp) are read-only and need no key, token or account.

- Limit: 60 requests a minute per IP. Past that you get `429` with a `Retry-After` header.
- CORS: open to any origin.
- Writing (submitting, voting, commenting) needs a signed-in account on https://buildyourlaunch.com and has no API.

Docs: https://buildyourlaunch.com/developers · OpenAPI: https://buildyourlaunch.com/openapi.json