Same issue here. Single getCandleData call once per hour, MCX commodity, ONE_HOUR, ~495 candles. Roughly one cycle in three rejected with plain-text Access denied because of exceeding access rate.
One data point that may help narrow it: on 4 Sep, three attempts spaced 75 seconds apart (13:02:30, 13:03:45, 13:05:00) were all rejected — so the block persisted over 2.5 minutes, which doesn't look like a short-window burst limit.
Also noticing that the Python SDK sets X-ClientPublicIP to an address that isn't the static IP registered against my app, though requests do originate from the registered IP. Has anyone checked whether that's related?