From 2adc0d08b249f0df1ce5013114f40a320fae0a8b Mon Sep 17 00:00:00 2001 From: Antiheld86 <4201585+Antiheld86@users.noreply.github.com> Date: Thu, 3 Sep 2026 11:28:22 +0200 Subject: [PATCH] docs: note the live-token ceiling in the Home Assistant guide The mint endpoint's 409 ceiling wasn't mentioned anywhere a self-hoster would see it before hitting it. --- docs/integrations/home-assistant.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/integrations/home-assistant.md b/docs/integrations/home-assistant.md index 89f787060..b1b92e337 100644 --- a/docs/integrations/home-assistant.md +++ b/docs/integrations/home-assistant.md @@ -22,6 +22,14 @@ Tokens expire after a year by default. They appear in the API Tokens list on the same page alongside every other credential on the account, and are revoked there. +An account can hold at most ten live measurement tokens at once — across every +automation platform combined, not ten per platform. Past that, minting another +is refused with a 409 until you revoke one; revoking frees the slot +immediately, and an expired token stops counting on its own. It is not a +security boundary, just a backstop against a script stuck minting in a retry +loop, so a household running a scale, a watch bridge and a couple of scripts +will never come close. + ## What the token can and cannot do It can add readings, on your own record, through: