Implement hierarchical rate limiting with IETF-standard headers for multi-tenant SaaS APIs.
npx skills add https://github.com/robotijn/ctoc --skill rate-limiting-robotijn
Please help me install this Agent Skill. Skill: rate-limiting Source: https://github.com/robotijn/ctoc/tree/main/skills/saas/rate-limiting Command: npx skills add https://github.com/robotijn/ctoc --skill rate-limiting-robotijn
Unprotected SaaS APIs are vulnerable to brute-force credential attacks, distributed denial-of-service (DoS) incidents, noisy-neighbor resource starvation on multi-tenant platforms, and abusive bot traffic, leading to service outages, data breaches, and unfair resource consumption for legitimate users.
Use the rate-limiting skill to implement hierarchical per-tenant and per-IP rate limits for your SaaS API with proper IETF headers and brute-force protection for authentication endpoints.
High-intent search queries and answers about installing and using this skill.
Implement hierarchical rate limiting to enforce layered caps at global, per-tenant, per-user, and per-IP scopes. This prevents noisy-neighbor resource starvation by ensuring one customer's batch job cannot consume all shared API capacity.
Distributed throttling uses Redis or equivalent distributed state to track request counts across multiple server instances. This enables consistent sliding window or token bucket enforcement for multi-tenant SaaS platforms regardless of which node handles the request.
Apply fail-closed rate limiting behavior to sensitive authentication endpoints. Layered limits at per-IP and per-user scopes block credential-stuffing attacks while allowing legitimate login attempts.
Yes, this skill provides algorithm selection and implementation examples for FastAPI, Spring Boot, .NET, and Next.js. It integrates common tools like Upstash Ratelimit, slowapi, and Bucket4j across major web frameworks and cloud runtimes.
Emit IETF-compliant RateLimit headers and proper 429 Too Many Requests responses with Retry-After values. This enables well-behaved clients to self-throttle without hitting limits repeatedly.
Select rate-limiting algorithms based on use case: sliding window for strict per-tenant caps on developer APIs, token bucket for burstable web traffic. Match the algorithm to high-cost operations like AI inference or bulk exports.
gaoqiongxieConfigure Redis, Caffeine, Spring Session, and Redis Stream for Spring Boot.
exilonXImplement rate-limit resilience for VTEX marketplace API calls with exponential backoff and Retry-After handling.
BagelHoleDesign multi-tenant LLM hosting platforms with tenant isolation and usage tracking.
cosmixConfigures Rate-Limiting algorithms such as token bucket, sliding window and leaky bucket for APIs.
