Follow-up to my Oct 12 review of Helius's RPC + DAS API (link below).

Helius support responded and confirmed the findings:

1. Auth error format CONFIRMED as a real bug.

Auth runs before JSON-RPC parsing, so it bypasses the structured error envelope. They confirmed it conflicts with their docs and a fix is planned. Interim guidance: check HTTP status before parsing the body as JSON.

2. Actual RPS limits revealed:

• Free: 2 req/s

• Developer: 10 req/s

• Business: 50 req/s

• Professional: 100 req/s

Short bursts can exceed the sustained rate because burst capacity is available, that's why my 30 sequential + 20 concurrent calls all returned 200 without a 429. Retry-After only returns on an actual 429 rejection.

Still recommending: publish these per-tier RPS values on the pricing page/README so devs don't need a support ticket to find them.

Original review: https://tokengems.ai/tokens/solana/helius-staked-sol-he1iusmfkpAdwvxLNGV8Y1iSbj4rUy6yMhEA3fotn9A

Scope: same as original — free tier, no paid upgrade, no affiliation.