Thanks for asking about this @electwix!
Machine API rate limits apply per-action, per-machine. Currently, the limit is 1 request, per second, per action—short-term burstable up to 3/r/s/a for everything except the Get Machine call—that one is 5 req/s, burstable up to 10 req/s.
Edit: we now publish Machine API rate limits here.