diff --git a/lib/travis/api/app.rb b/lib/travis/api/app.rb
index 7fa44e56..a2763fdd 100644
--- a/lib/travis/api/app.rb
+++ b/lib/travis/api/app.rb
@@ -125,7 +125,7 @@ module Travis::Api
         use Travis::Api::App::Middleware::Metriks
 
         # make sure this is below ScopeCheck so we have the token
-        use Rack::Attack
+        use Rack::Attack if Endpoint.production?
 
         # if this is a v3 API request, ignore everything after
         use Travis::API::V3::OptIn