Responses must be free once per consumer in any 12-month period; for manifestly unfounded, excessive or repetitive requests the controller may charge a reasonable administrative fee or decline, and bears the burden of showing that character.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.