The default free BASIC plan allowing one million requests a month is the line I'd want every new provider to see before publishing. Easy to miss, and expensive if the origin isn't checking X-RapidAPI-Proxy-Secret either. Putting those two next to each other in the checklist is a good call.