GraphQL: API rate limit already exceeded for user ID

[althafdemiandra]

Select Topic Area

Question

Body

i keep getting rate limited and everytime the resetAt time is reached, it automatically added again
yet i dont know what used my graphql api

anyone can help?

userId: 100656575

gh api graphql -f query='
{
  rateLimit {
    limit
    cost
    remaining
    resetAt
  }
}'

{
  "data": {
    "rateLimit": {
      "limit": 5000,
      "cost": 1,
      "remaining": 0,
      "resetAt": "2026-01-15T05:55:24Z"
    }
  }
}

{
  "resources": {
    "core": {
      "limit": 5000,
      "used": 592,
      "remaining": 4408,
      "reset": 1768463026
    },
    "search": {
      "limit": 30,
      "used": 0,
      "remaining": 30,
      "reset": 1768461165
    },
    "graphql": {
      "limit": 5000,
      "used": 5004,
      "remaining": 0,
      "reset": 1768463776
    },
    "integration_manifest": {
      "limit": 5000,
      "used": 0,
      "remaining": 5000,
      "reset": 1768464705
    },
    "source_import": {
      "limit": 100,
      "used": 0,
      "remaining": 100,
      "reset": 1768461165
    },
    "code_scanning_upload": {
      "limit": 5000,
      "used": 592,
      "remaining": 4408,
      "reset": 1768463026
    },
    "code_scanning_autofix": {
      "limit": 10,
      "used": 0,
      "remaining": 10,
      "reset": 1768461165
    },
    "actions_runner_registration": {
      "limit": 10000,
      "used": 0,
      "remaining": 10000,
      "reset": 1768464705
    },
    "scim": {
      "limit": 15000,
      "used": 0,
      "remaining": 15000,
      "reset": 1768464705
    },
    "dependency_snapshots": {
      "limit": 100,
      "used": 0,
      "remaining": 100,
      "reset": 1768461165
    },
    "dependency_sbom": {
      "limit": 100,
      "used": 0,
      "remaining": 100,
      "reset": 1768461165
    },
    "audit_log": {
      "limit": 1750,
      "used": 0,
      "remaining": 1750,
      "reset": 1768464705
    },
    "audit_log_streaming": {
      "limit": 15,
      "used": 0,
      "remaining": 15,
      "reset": 1768464705
    },
    "code_search": {
      "limit": 10,
      "used": 0,
      "remaining": 10,
      "reset": 1768461165
    }
  },
  "rate": {
    "limit": 5000,
    "used": 592,
    "remaining": 4408,
    "reset": 1768463026
  }
}

[Sabari-Vasan-SM]

This usually happens when something is continuously hitting the GraphQL API in the background. Since only your graphql limit is exhausted (5004/5000) and everything else looks fine, it’s likely one of these:

A script, bot, or service using your token (CI job, local script, cron, etc.)

A GitHub app or integration authorized on your account

An editor/IDE extension repeatedly querying GraphQL

An old token leaked or still in use somewhere

A few things you can try:

Check Settings → Developer settings → Personal access tokens and revoke unused tokens

Review Authorized GitHub Apps

Temporarily disable CI/workflows or local scripts

Generate a new token and update only the places you actually need

Once the source stops, the rate limit should behave normally after reset.

[pdparchitect]

VSCode GitHub Pull Request extension in particular is hitting this error like every 10 minutes.