Are there rate limits on the API?

No published rate limits today. Be reasonable — heavy abuse (sustained >100 calls/minute or attempts to scrape) may result in key revocation.

Underlying Replicate has soft rate limits per model. If you hit them, you'll see a 429 response from us forwarded from upstream. In practice nobody hits these.