Budget Configuration

Set spending ceilings to prevent cost overruns from runaway agents.

How budgets work

A budget is a spending ceiling attached to a user account or an individual API key. When the estimated cost of a request would push cumulative spend over the budget, the proxy blocks the request with a 429 Too Many Requests response.

Budget enforcement happens before the request is forwarded to the LLM provider. The proxy checks the current spend against the budget atomically using a Cloudflare Durable Object (single-threaded, no race conditions even under concurrent load).

Creating a budget

1. Open the NullSpend dashboard
2. Click Set Budget
3. Configure:
   • Budget for — your account or a specific API key
   • Budget limit — spending ceiling in dollars (e.g., $50.00)
   • Reset interval — none (manual reset), daily, weekly, or monthly
4. Optionally configure advanced guardrails (expand each section):
   • Velocity limit — max spend per sliding time window (triggers a cooldown if exceeded)
   • Alert thresholds — custom percentage thresholds for webhook alerts
   • Session limit — max spend per agent session (see below)
5. Click Set Budget

The budget takes effect immediately. No proxy restart or redeployment needed.

Budget enforcement behavior

When a request would exceed the budget:

1. The proxy returns HTTP 429 Too Many Requests
2. The response body includes a machine-readable error:

   {
     "error": {
       "code": "budget_exceeded",
       "message": "Request blocked: estimated cost exceeds remaining budget",
       "details": null
     }
   }

3. Your application receives a standard HTTP error — handle it like any other rate limit or quota error

The blocked request is never forwarded to the LLM provider. You are not charged by OpenAI/Anthropic for blocked requests.

Velocity limits

Velocity limits catch runaway loops — an agent stuck in a retry cycle can burn through a budget in seconds. When spend in a sliding window exceeds the velocity limit, the proxy trips a circuit breaker and blocks requests for a cooldown period.

Configure in the budget dialog:

• Velocity limit — dollar amount per window (e.g., $10)
• Window — sliding window in seconds (10-3600, default 60)
• Cooldown — block duration after tripping (10-3600, default 60)

Velocity denial returns 429 with "code": "velocity_exceeded" and a Retry-After header indicating when the cooldown expires.

Session limits

Session limits cap how much a single agent session can spend, regardless of the overall budget. This prevents a single long-running agent task from consuming the entire budget.

How it works

1. Your agent sets a session ID via the X-NullSpend-Session header on each request
2. The proxy tracks cumulative spend per session ID per budget entity
3. When a session's spend would exceed the session limit, the request is blocked

Configuration

Set the session limit in the budget dialog under "Session limit (optional)". Enter a dollar amount (e.g., $5.00).

Session denial response

{
  "error": {
    "code": "session_limit_exceeded",
    "message": "Request blocked: session spend exceeds session limit. Start a new session.",
    "details": {
      "session_id": "agent-task-abc",
      "session_spend_microdollars": 4800000,
      "session_limit_microdollars": 5000000
    }
  }
}

No Retry-After header is sent — the session is done. The agent should start a new session (new session ID) to continue.

Key behaviors

• No session header = no enforcement. Session limits only apply when the X-NullSpend-Session header is present.
• Sessions are client-defined. The proxy does not manage session lifecycle. Your agent decides when to start a new session by sending a new session ID.
• Independent of budget resets. Session spend does NOT reset when the budget period resets. A session spans calendar boundaries.
• Always strict block. Session limits are hard caps regardless of the budget policy (strict_block, soft_block, or warn).
• 24-hour cleanup. Stale session data is automatically cleaned up after 24 hours of inactivity.

Webhook event

When a session limit is exceeded, a session.limit_exceeded webhook event is dispatched (if webhooks are configured).

Budget tracking

Budget spend is tracked in real-time using a Cloudflare Durable Object with embedded SQLite. This means:

• Spend updates are instantaneous (no batch processing delay)
• Concurrent requests are serialized (no race conditions)
• Budget state is durable and survives proxy restarts

Viewing budget status

In the dashboard, go to Budgets to see:

• Current spend vs. ceiling for each budget
• Percentage utilization with color-coded health indicators
• Velocity limit indicator (lightning icon) and session limit indicator (clock icon)
• Reset interval and days remaining

Best practices

Start generous, tighten later

Set your initial budget higher than you expect to need. Once you have a few days of cost data in the analytics dashboard, you can tighten the budget to a reasonable ceiling with confidence.

One budget per concern

Create separate API keys (and budgets) for different agents, environments, or teams:

• production-agent-alpha — $200/month
• production-agent-beta — $100/month
• staging — $20/month
• development — $5/month

Use session limits for long-running agents

If your agents run multi-step tasks (research, code generation, data analysis), set a session limit to cap each task's cost. This prevents a single stuck agent from consuming the entire budget while still allowing other tasks to proceed.

Monitor before enforcing

Use the analytics dashboard to understand your spending patterns before setting tight budgets. The daily spend chart and model breakdown help you identify which models and agents drive the most cost.

Pricing tier limits

The Free tier includes 3 budgets — enough for separate production, staging, and development keys. Upgrade to Pro for unlimited budgets across all keys and environments.

API Reference

For programmatic budget management, see the Budgets API. Key endpoints:

• POST /api/budgets — create or update a budget (session auth)
• GET /api/budgets/status — check remaining balance (API key auth)