laravel:rate-limiting

Limit per-user and per-route API calls with Laravel RateLimiter and throttle middleware.

Updated Apr 7, 2026
One-click install
npx skills add https://github.com/Sivanwol/sabo-platfom --skill laravel-rate-limiting-sivanwol
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel:rate-limiting
Source: https://github.com/Sivanwol/sabo-platfom/tree/main/.agents/skills/laravel-rate-limiting
Command: npx skills add https://github.com/Sivanwol/sabo-platfom --skill laravel-rate-limiting-sivanwol

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Per-user and per-route rate limits are essential to protect APIs from abuse while preserving a smooth user experience.

Core Features & Use Cases

  • Per-user rate limiting using RateLimiter
  • Route-based throttling with throttle middleware
  • Header-based visibility and automatic retry hints

Quick Start

Configure RateLimiter in RouteServiceProvider and apply the throttle middleware to routes.

Frequently Asked Questions about laravel:rate-limiting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up per-user rate limiting in Laravel to prevent API abuse?

Per-user rate limiting in Laravel is configured using the RateLimiter facade within RouteServiceProvider, allowing you to define limits based on user IDs or IP addresses to prevent API abuse. You then apply the throttle middleware to protected routes.

Can I apply route-based throttling to public APIs and admin dashboards in Laravel?

Yes, route-based throttling can be applied across public APIs and admin dashboards in Laravel by attaching the throttle middleware to specific routes. This protects endpoints from burst traffic and prevents abusive API calls.

What is the best way to limit API calls per route in a Laravel application?

The best way to limit API calls per route is using Laravel's throttle middleware combined with the RateLimiter facade. This approach limits traffic on specific protected endpoints and handles scenarios with burst traffic effectively.

How does Laravel's throttle middleware handle burst traffic on protected endpoints?

Laravel's throttle middleware handles burst traffic by enforcing per-user and per-route API call limits on protected endpoints. It uses the RateLimiter to track requests by user ID or IP address, blocking excessive calls while preserving normal user experience.

Do I need Laravel's RateLimiter to configure per-user API rate limits?

Yes, you need Laravel's RateLimiter to configure per-user API rate limits. The Skill requires the RateLimiter component and the by() method to identify users via their IDs or IP addresses, applying limits through the standard throttle middleware.