diff --git a/web/src/components/routes/ClientTypeRoutesContent.tsx b/web/src/components/routes/ClientTypeRoutesContent.tsx
index c92d82b1..ec81ebe1 100644
--- a/web/src/components/routes/ClientTypeRoutesContent.tsx
+++ b/web/src/components/routes/ClientTypeRoutesContent.tsx
@@ -1087,71 +1087,73 @@ function ClientTypeRoutesContentInner({
           {/* Add Route Section - Grouped by Type */}
           {hasAvailableProviders && (
             <div className="pt-4 border-t border-border/50 ">
-              <div className="mb-6 flex flex-col gap-4 lg:flex-row lg:items-center lg:justify-between">
-                <div className="flex items-center gap-2">
-                  <Settings2 size={14} style={{ color }} />
-                  <span className="text-caption font-medium text-muted-foreground">
-                    {t('routes.availableProviders')}
-                  </span>
-                </div>
-                <div className="flex flex-wrap items-center gap-2 rounded-xl border border-border/60 bg-background/80 px-3 py-2 shadow-sm">
-                  <label className="flex items-center gap-2 text-sm text-muted-foreground">
-                    <input
-                      type="checkbox"
-                      checked={allVisibleAvailableSelected}
-                      aria-checked={
-                        someVisibleAvailableSelected ? 'mixed' : allVisibleAvailableSelected
-                      }
-                      onChange={(event) =>
-                        handleToggleAllVisibleAvailableProviders(event.target.checked)
-                      }
-                      className="h-4 w-4 rounded border-border accent-primary"
-                    />
-                    <span>
-                      {t('routes.bulkSelectVisibleProviders', {
-                        count: visibleAvailableProviderIds.length,
-                      })}
-                      {normalizedQuery && (
-                        <span className="ml-1 text-muted-foreground/70">
-                          {t('routes.bulkFilteredSelection')}
-                        </span>
-                      )}
+              <div className="sticky top-0 z-20 -mx-1 mb-6 rounded-xl border border-border/60 bg-background/95 px-1 py-2 shadow-sm backdrop-blur supports-[backdrop-filter]:bg-background/80">
+                <div className="flex flex-col gap-4 px-2 lg:flex-row lg:items-center lg:justify-between">
+                  <div className="flex items-center gap-2">
+                    <Settings2 size={14} style={{ color }} />
+                    <span className="text-caption font-medium text-muted-foreground">
+                      {t('routes.availableProviders')}
                     </span>
-                  </label>
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    disabled={visibleAvailableProviderIds.length === 0 || createRoute.isPending}
-                    onClick={handleInvertVisibleAvailableProviders}
-                  >
-                    {t('routes.bulkInvertVisibleProviders')}
-                  </Button>
-                  {selectedAvailableProviders.length > 0 && (
-                    <span className="text-xs text-muted-foreground">
-                      {t('routes.bulkSelectedProvidersCount', {
-                        count: selectedAvailableProviders.length,
-                      })}
-                    </span>
-                  )}
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    disabled={selectedAvailableProviders.length === 0 || createRoute.isPending}
-                    onClick={handleClearAvailableProviderSelection}
-                  >
-                    {t('common.clear')}
-                  </Button>
-                  <Button
-                    size="sm"
-                    disabled={selectedAvailableProviders.length === 0 || createRoute.isPending}
-                    onClick={handleBulkAddRoutes}
-                  >
-                    {createRoute.isPending
-                      ? t('routes.bulkAddingProviders')
-                      : t('routes.bulkAddSelectedProviders', {
+                  </div>
+                  <div className="flex flex-wrap items-center gap-2">
+                    <label className="flex items-center gap-2 text-sm text-muted-foreground">
+                      <input
+                        type="checkbox"
+                        checked={allVisibleAvailableSelected}
+                        aria-checked={
+                          someVisibleAvailableSelected ? 'mixed' : allVisibleAvailableSelected
+                        }
+                        onChange={(event) =>
+                          handleToggleAllVisibleAvailableProviders(event.target.checked)
+                        }
+                        className="h-4 w-4 rounded border-border accent-primary"
+                      />
+                      <span>
+                        {t('routes.bulkSelectVisibleProviders', {
+                          count: visibleAvailableProviderIds.length,
+                        })}
+                        {normalizedQuery && (
+                          <span className="ml-1 text-muted-foreground/70">
+                            {t('routes.bulkFilteredSelection')}
+                          </span>
+                        )}
+                      </span>
+                    </label>
+                    <Button
+                      variant="outline"
+                      size="sm"
+                      disabled={visibleAvailableProviderIds.length === 0 || createRoute.isPending}
+                      onClick={handleInvertVisibleAvailableProviders}
+                    >
+                      {t('routes.bulkInvertVisibleProviders')}
+                    </Button>
+                    {selectedAvailableProviders.length > 0 && (
+                      <span className="text-xs text-muted-foreground">
+                        {t('routes.bulkSelectedProvidersCount', {
                           count: selectedAvailableProviders.length,
                         })}
-                  </Button>
+                      </span>
+                    )}
+                    <Button
+                      variant="outline"
+                      size="sm"
+                      disabled={selectedAvailableProviders.length === 0 || createRoute.isPending}
+                      onClick={handleClearAvailableProviderSelection}
+                    >
+                      {t('common.clear')}
+                    </Button>
+                    <Button
+                      size="sm"
+                      disabled={selectedAvailableProviders.length === 0 || createRoute.isPending}
+                      onClick={handleBulkAddRoutes}
+                    >
+                      {createRoute.isPending
+                        ? t('routes.bulkAddingProviders')
+                        : t('routes.bulkAddSelectedProviders', {
+                            count: selectedAvailableProviders.length,
+                          })}
+                    </Button>
+                  </div>
                 </div>
               </div>
               {bulkAddError && (
diff --git a/web/src/locales/en.json b/web/src/locales/en.json
index ea4649d1..ad33175a 100644
--- a/web/src/locales/en.json
+++ b/web/src/locales/en.json
@@ -1325,6 +1325,9 @@
     "apiTokenConcurrencyDesc": "Configure the maximum number of in-flight requests allowed per API token",
     "apiTokenConcurrencyLimit": "Concurrent Request Limit",
     "apiTokenConcurrencyHint": "When the limit is exceeded, new requests for the same token return a standard 429 rate limit response until an active request completes.",
+    "rateLimitCooldownDefaultSeconds": "429 default cooldown",
+    "rateLimitCooldownDefaultSecondsHint": "When upstream 429 / concurrency limits do not return Retry-After, use this value as the automatic cooldown duration. Upstream Retry-After still takes priority when present.",
+    "rateLimitCooldownDefaultSecondsInvalid": "429 default cooldown must be an integer between 1 and 86400.",
     "concurrentRequestsUnit": "requests",
     "defaultValue": "default {{value}}",
     "minutes": "minutes",
diff --git a/web/src/locales/zh.json b/web/src/locales/zh.json
index 11bb334a..84761a17 100644
--- a/web/src/locales/zh.json
+++ b/web/src/locales/zh.json
@@ -1322,6 +1322,9 @@
     "apiTokenConcurrencyDesc": "配置每个 API Token 允许同时进行中的请求数上限",
     "apiTokenConcurrencyLimit": "并发请求上限",
     "apiTokenConcurrencyHint": "超过限制时，同一 Token 的新请求会返回标准 429 限流响应，直到已有请求完成。",
+    "rateLimitCooldownDefaultSeconds": "429 默认冻结时间",
+    "rateLimitCooldownDefaultSecondsHint": "当上游 429 / 并发限制没有返回 Retry-After 时，使用此秒数作为自动冻结时长；上游返回 Retry-After 时仍优先使用上游时间。",
+    "rateLimitCooldownDefaultSecondsInvalid": "429 默认冻结时间必须是 1 到 86400 之间的整数。",
     "concurrentRequestsUnit": "个请求",
     "defaultValue": "默认 {{value}}",
     "minutes": "分钟",
diff --git a/web/src/pages/providers/components/grok-token-import.test.ts b/web/src/pages/providers/components/grok-token-import.test.ts
new file mode 100644
index 00000000..a198b634
--- /dev/null
+++ b/web/src/pages/providers/components/grok-token-import.test.ts
@@ -0,0 +1,71 @@
+import { describe, expect, it } from 'vitest';
+import { normalizeGrokConfig } from './grok-token-import';
+
+describe('normalizeGrokConfig', () => {
+  it('accepts direct CPA xAI credential JSON', () => {
+    expect(
+      normalizeGrokConfig({
+        type: 'xai',
+        auth_kind: 'oauth',
+        email: 'user@example.com',
+        access_token: 'access-token',
+        refresh_token: 'refresh-token',
+        base_url: 'https://cli-chat-proxy.grok.com/v1',
+      }),
+    ).toMatchObject({
+      type: 'xai',
+      authKind: 'oauth',
+      email: 'user@example.com',
+      accessToken: 'access-token',
+      refreshToken: 'refresh-token',
+      baseURL: 'https://cli-chat-proxy.grok.com/v1',
+    });
+  });
+
+  it('accepts CLIProxyAPI auth records with credentials in metadata', () => {
+    expect(
+      normalizeGrokConfig({
+        provider: 'xai',
+        disabled: true,
+        attributes: { auth_kind: 'oauth' },
+        metadata: {
+          type: 'xai',
+          email: 'record@example.com',
+          access_token: 'record-access',
+          refresh_token: 'record-refresh',
+        },
+      }),
+    ).toMatchObject({
+      type: 'xai',
+      authKind: 'oauth',
+      email: 'record@example.com',
+      accessToken: 'record-access',
+      refreshToken: 'record-refresh',
+      disabled: true,
+    });
+  });
+
+  it('accepts Maxx exported Grok providers with camelCase config', () => {
+    expect(
+      normalizeGrokConfig({
+        type: 'grok',
+        name: 'Grok export',
+        config: {
+          grok: {
+            type: 'xai',
+            authKind: 'oauth',
+            email: 'maxx@example.com',
+            accessToken: 'maxx-access',
+            refreshToken: 'maxx-refresh',
+          },
+        },
+      }),
+    ).toMatchObject({
+      type: 'xai',
+      authKind: 'oauth',
+      email: 'maxx@example.com',
+      accessToken: 'maxx-access',
+      refreshToken: 'maxx-refresh',
+    });
+  });
+});
diff --git a/web/src/pages/providers/components/grok-token-import.tsx b/web/src/pages/providers/components/grok-token-import.tsx
index 26f7200f..b111a365 100644
--- a/web/src/pages/providers/components/grok-token-import.tsx
+++ b/web/src/pages/providers/components/grok-token-import.tsx
@@ -12,7 +12,7 @@ import { useCreateModelMapping, useCreateProvider } from '@/hooks/queries';
 import type { ClientType, CreateProviderData } from '@/lib/transport';
 import type { ProviderConfigGrok } from '@/lib/transport/types';
 
-interface CPAxAIExportJSON {
+export interface CPAxAIExportJSON {
   type?: string;
   auth_kind?: string;
   email?: string;
@@ -31,9 +31,24 @@ interface CPAxAIExportJSON {
   headers?: Record<string, string>;
 }
 
+interface MaxxGrokProviderExport {
+  type?: string;
+  name?: string;
+  config?: {
+    grok?: ProviderConfigGrok;
+  };
+}
+
+interface CPAAuthRecordExport {
+  provider?: string;
+  disabled?: boolean;
+  attributes?: Record<string, string>;
+  metadata?: CPAxAIExportJSON;
+}
+
 interface GrokImportItem {
   source: string;
-  raw: CPAxAIExportJSON;
+  raw: CPAxAIExportJSON | MaxxGrokProviderExport | CPAAuthRecordExport;
 }
 
 const GROK_CLIENT_TYPES = ['openai'] as const satisfies readonly ClientType[];
@@ -147,36 +162,111 @@ function ModelMappingsEditor({ mappings, onChange }: ModelMappingsEditorProps) {
   );
 }
 
-function normalizeGrokConfig(raw: CPAxAIExportJSON): ProviderConfigGrok {
-  if (raw.type !== 'xai') {
-    throw new Error(`Expected CPA xai credential JSON, got type=${raw.type || '(empty)'}`);
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+function stringValue(value: unknown): string | undefined {
+  return typeof value === 'string' ? value : undefined;
+}
+
+function numberValue(value: unknown): number | undefined {
+  return typeof value === 'number' ? value : undefined;
+}
+
+function booleanValue(value: unknown): boolean | undefined {
+  return typeof value === 'boolean' ? value : undefined;
+}
+
+function stringRecord(value: unknown): Record<string, string> | undefined {
+  if (!isRecord(value)) return undefined;
+  const out: Record<string, string> = {};
+  for (const [key, val] of Object.entries(value)) {
+    if (typeof val === 'string') out[key] = val;
   }
-  if ((raw.auth_kind || 'oauth') !== 'oauth') {
-    throw new Error(`Expected oauth credential JSON, got auth_kind=${raw.auth_kind || '(empty)'}`);
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+function normalizeSnakeCaseCredential(raw: Record<string, unknown>): ProviderConfigGrok {
+  const type = stringValue(raw.type);
+  if (type !== 'xai') {
+    throw new Error(`Expected CPA xai credential JSON, got type=${type || '(empty)'}`);
   }
-  if (!raw.access_token && !raw.refresh_token) {
+  const authKind = stringValue(raw.auth_kind) || 'oauth';
+  if (authKind !== 'oauth') {
+    throw new Error(`Expected oauth credential JSON, got auth_kind=${authKind || '(empty)'}`);
+  }
+  const accessToken = stringValue(raw.access_token);
+  const refreshToken = stringValue(raw.refresh_token);
+  if (!accessToken && !refreshToken) {
     throw new Error('access_token or refresh_token is required');
   }
   return {
     type: 'xai',
     authKind: 'oauth',
-    email: raw.email,
-    sub: raw.sub,
-    accessToken: raw.access_token,
-    refreshToken: raw.refresh_token,
-    idToken: raw.id_token,
-    tokenType: raw.token_type,
-    expiresIn: raw.expires_in,
-    expired: raw.expired,
-    lastRefresh: raw.last_refresh,
-    redirectURI: raw.redirect_uri,
-    tokenEndpoint: raw.token_endpoint,
-    baseURL: raw.base_url,
-    disabled: raw.disabled,
-    headers: raw.headers,
+    email: stringValue(raw.email),
+    sub: stringValue(raw.sub),
+    accessToken,
+    refreshToken,
+    idToken: stringValue(raw.id_token),
+    tokenType: stringValue(raw.token_type),
+    expiresIn: numberValue(raw.expires_in),
+    expired: stringValue(raw.expired),
+    lastRefresh: stringValue(raw.last_refresh),
+    redirectURI: stringValue(raw.redirect_uri),
+    tokenEndpoint: stringValue(raw.token_endpoint),
+    baseURL: stringValue(raw.base_url),
+    disabled: booleanValue(raw.disabled),
+    headers: stringRecord(raw.headers),
   };
 }
 
+function normalizeMaxxGrokConfig(raw: ProviderConfigGrok): ProviderConfigGrok {
+  if ((raw.type || 'xai') !== 'xai') {
+    throw new Error(`Expected Maxx Grok xai config, got type=${raw.type || '(empty)'}`);
+  }
+  if ((raw.authKind || 'oauth') !== 'oauth') {
+    throw new Error(`Expected Maxx Grok oauth config, got authKind=${raw.authKind || '(empty)'}`);
+  }
+  if (!raw.accessToken && !raw.refreshToken) {
+    throw new Error('accessToken or refreshToken is required');
+  }
+  return {
+    ...raw,
+    type: 'xai',
+    authKind: 'oauth',
+  };
+}
+
+export function normalizeGrokConfig(
+  raw: CPAxAIExportJSON | MaxxGrokProviderExport | CPAAuthRecordExport,
+): ProviderConfigGrok {
+  if (!isRecord(raw)) {
+    throw new Error('Expected CPA xai credential JSON object');
+  }
+
+  // Maxx provider export/import payload: { type: 'grok', config: { grok: { ...camelCase } } }.
+  const config = raw.config;
+  if (isRecord(config) && isRecord(config.grok)) {
+    return normalizeMaxxGrokConfig(config.grok as ProviderConfigGrok);
+  }
+
+  // CLIProxyAPI auth record export: { provider: 'xai', attributes: {...}, metadata: { type: 'xai', ... } }.
+  if (isRecord(raw.metadata)) {
+    const provider = stringValue(raw.provider);
+    if (provider && provider !== 'xai' && provider !== 'grok') {
+      throw new Error(`Expected CPA xai auth record, got provider=${provider}`);
+    }
+    const merged: Record<string, unknown> = { ...raw.metadata };
+    if (!merged.auth_kind && isRecord(raw.attributes)) merged.auth_kind = raw.attributes.auth_kind;
+    if (merged.disabled === undefined && typeof raw.disabled === 'boolean')
+      merged.disabled = raw.disabled;
+    return normalizeSnakeCaseCredential(merged);
+  }
+
+  return normalizeSnakeCaseCredential(raw);
+}
+
 function providerName(grok: ProviderConfigGrok, source: string): string {
   if (grok.email) return `Grok (${grok.email})`;
   const stem = source.replace(/\.json$/i, '').trim();
@@ -186,7 +276,7 @@ function providerName(grok: ProviderConfigGrok, source: string): string {
 function parseImportItemsFromText(jsonText: string): GrokImportItem[] {
   const trimmed = jsonText.trim();
   if (!trimmed) return [];
-  const parsed = JSON.parse(trimmed) as CPAxAIExportJSON | CPAxAIExportJSON[];
+  const parsed = JSON.parse(trimmed) as GrokImportItem['raw'] | GrokImportItem['raw'][];
   if (Array.isArray(parsed)) {
     return parsed.map((raw, index) => ({ source: `pasted item ${index + 1}`, raw }));
   }
@@ -197,7 +287,7 @@ async function parseImportItemsFromFiles(files: FileList): Promise<GrokImportIte
   const items: GrokImportItem[] = [];
   for (const file of Array.from(files)) {
     const text = await file.text();
-    const parsed = JSON.parse(text) as CPAxAIExportJSON | CPAxAIExportJSON[];
+    const parsed = JSON.parse(text) as GrokImportItem['raw'] | GrokImportItem['raw'][];
     if (Array.isArray(parsed)) {
       parsed.forEach((raw, index) => items.push({ source: `${file.name}#${index + 1}`, raw }));
     } else {
@@ -286,7 +376,9 @@ export function GrokTokenImport() {
   return (
     <div className="flex h-full flex-col">
       <PageHeader
-        icon={<ChevronLeft className="cursor-pointer" onClick={() => navigate('/providers/create')} />}
+        icon={
+          <ChevronLeft className="cursor-pointer" onClick={() => navigate('/providers/create')} />
+        }
         title={t('addProvider.grok.name')}
         description={t('addProvider.grok.description')}
       >
@@ -315,7 +407,10 @@ export function GrokTokenImport() {
               {t('provider.basicInfo')}
             </h3>
             <div className="rounded-lg border bg-card p-4">
-              <label className="block text-sm font-medium text-foreground" htmlFor="grok-json-files">
+              <label
+                className="block text-sm font-medium text-foreground"
+                htmlFor="grok-json-files"
+              >
                 <span className="inline-flex items-center gap-2">
                   <FileJson size={14} /> {t('addProvider.grok.jsonFiles')}
                 </span>
diff --git a/web/src/pages/providers/types.test.ts b/web/src/pages/providers/types.test.ts
index 229d89ff..d8fbf1e0 100644
--- a/web/src/pages/providers/types.test.ts
+++ b/web/src/pages/providers/types.test.ts
@@ -16,6 +16,7 @@ describe('provider type helpers', () => {
       'claude',
       'bedrock',
       'openrouter',
+      'grok',
       'custom',
     ]);
   });
diff --git a/web/src/pages/settings/index.tsx b/web/src/pages/settings/index.tsx
index f7401c79..d48fb7a0 100644
--- a/web/src/pages/settings/index.tsx
+++ b/web/src/pages/settings/index.tsx
@@ -1429,33 +1429,56 @@ function APITokenConcurrencySection() {
   const { t } = useTranslation();
 
   const currentLimit = settings?.api_token_concurrent_limit || '5';
+  const currentRateLimitCooldown = settings?.cooldown_rate_limit_default_seconds || '5';
   const [limitDraft, setLimitDraft] = useState('');
+  const [rateLimitCooldownDraft, setRateLimitCooldownDraft] = useState('');
   const [initialized, setInitialized] = useState(false);
 
   useEffect(() => {
     if (!isLoading && !initialized) {
       setLimitDraft(currentLimit);
+      setRateLimitCooldownDraft(currentRateLimitCooldown);
       setInitialized(true);
     }
-  }, [isLoading, initialized, currentLimit]);
+  }, [isLoading, initialized, currentLimit, currentRateLimitCooldown]);
 
-  const hasChanges = initialized && limitDraft !== currentLimit;
+  const hasLimitChanges = initialized && limitDraft !== currentLimit;
+  const hasRateLimitCooldownChanges =
+    initialized && rateLimitCooldownDraft !== currentRateLimitCooldown;
+  const hasChanges = hasLimitChanges || hasRateLimitCooldownChanges;
 
   useEffect(() => {
     if (initialized && !hasChanges) {
       setLimitDraft(currentLimit);
+      setRateLimitCooldownDraft(currentRateLimitCooldown);
     }
-  }, [currentLimit, initialized, hasChanges]);
-
-  const parsedLimit = parseInt(limitDraft, 10);
-  const isValid = !isNaN(parsedLimit) && parsedLimit >= 1;
+  }, [currentLimit, currentRateLimitCooldown, initialized, hasChanges]);
+
+  const parsedLimit = /^\d+$/.test(limitDraft.trim()) ? Number(limitDraft.trim()) : NaN;
+  const isLimitValid = Number.isInteger(parsedLimit) && parsedLimit >= 1;
+  const parsedRateLimitCooldown = /^\d+$/.test(rateLimitCooldownDraft.trim())
+    ? Number(rateLimitCooldownDraft.trim())
+    : NaN;
+  const isRateLimitCooldownValid =
+    Number.isInteger(parsedRateLimitCooldown) &&
+    parsedRateLimitCooldown >= 1 &&
+    parsedRateLimitCooldown <= 86400;
+  const isValid = isLimitValid && isRateLimitCooldownValid;
 
   const handleSaveLimit = async () => {
     if (!isValid || !hasChanges) return;
-    await updateSetting.mutateAsync({
-      key: 'api_token_concurrent_limit',
-      value: limitDraft,
-    });
+    if (hasLimitChanges) {
+      await updateSetting.mutateAsync({
+        key: 'api_token_concurrent_limit',
+        value: String(parsedLimit),
+      });
+    }
+    if (hasRateLimitCooldownChanges) {
+      await updateSetting.mutateAsync({
+        key: 'cooldown_rate_limit_default_seconds',
+        value: String(parsedRateLimitCooldown),
+      });
+    }
   };
 
   if (isLoading || !initialized) return null;
@@ -1483,26 +1506,58 @@ function APITokenConcurrencySection() {
         </div>
       </CardHeader>
       <CardContent className="p-6 space-y-4">
-        <div className="flex flex-col sm:flex-row sm:items-center gap-2 sm:gap-3">
-          <Label className="text-sm font-medium text-muted-foreground shrink-0">
-            {t('settings.apiTokenConcurrencyLimit')}
-          </Label>
-          <Input
-            type="number"
-            value={limitDraft}
-            onChange={(e) => setLimitDraft(e.target.value)}
-            className="w-24"
-            min={1}
-            disabled={updateSetting.isPending}
-          />
-          <span className="text-xs text-muted-foreground">
-            {t('settings.concurrentRequestsUnit')}
-          </span>
-          <span className="text-xs text-muted-foreground">
-            ({t('settings.defaultValue', { value: 5 })})
-          </span>
+        <div className="space-y-1.5">
+          <div className="flex flex-col sm:flex-row sm:items-center gap-2 sm:gap-3">
+            <Label className="text-sm font-medium text-muted-foreground shrink-0">
+              {t('settings.apiTokenConcurrencyLimit')}
+            </Label>
+            <Input
+              type="number"
+              value={limitDraft}
+              onChange={(e) => setLimitDraft(e.target.value)}
+              className="w-24"
+              min={1}
+              disabled={updateSetting.isPending}
+            />
+            <span className="text-xs text-muted-foreground">
+              {t('settings.concurrentRequestsUnit')}
+            </span>
+            <span className="text-xs text-muted-foreground">
+              ({t('settings.defaultValue', { value: 5 })})
+            </span>
+          </div>
+          <p className="text-xs text-muted-foreground">{t('settings.apiTokenConcurrencyHint')}</p>
+        </div>
+
+        <div className="space-y-1.5 pt-4 border-t border-border">
+          <div className="flex flex-col sm:flex-row sm:items-center gap-2 sm:gap-3">
+            <Label className="text-sm font-medium text-muted-foreground shrink-0">
+              {t('settings.rateLimitCooldownDefaultSeconds')}
+            </Label>
+            <Input
+              type="number"
+              value={rateLimitCooldownDraft}
+              onChange={(e) => setRateLimitCooldownDraft(e.target.value)}
+              className="w-24"
+              min={1}
+              max={86400}
+              step={1}
+              disabled={updateSetting.isPending}
+            />
+            <span className="text-xs text-muted-foreground">{t('common.seconds')}</span>
+            <span className="text-xs text-muted-foreground">
+              ({t('settings.defaultValue', { value: 5 })})
+            </span>
+          </div>
+          <p className="text-xs text-muted-foreground">
+            {t('settings.rateLimitCooldownDefaultSecondsHint')}
+          </p>
+          {!isRateLimitCooldownValid && (
+            <p className="text-xs text-destructive">
+              {t('settings.rateLimitCooldownDefaultSecondsInvalid')}
+            </p>
+          )}
         </div>
-        <p className="text-xs text-muted-foreground">{t('settings.apiTokenConcurrencyHint')}</p>
       </CardContent>
     </Card>
   );