← Back to search

io.github.CSOAI-ORG/agent-rate-limiter-mcp

CSOAI-ORG streamable_http Scanned 20d ago

Fleet-wide shared rate limiter for A2A + multi-MCP deployments. Most MCP servers rate-limit inde...

MCP Registry ↗
C
66.7 / 100

Versions

1.0.10latest
first seen Jun 30, 2026
1.0.2
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

acquire
annotations: none low

Request a rate-limit slot for an agent action. Returns {allowed, current, limit, retry_after_sec}. - tenant_id: the customer / organisation identifier - agent_id: which agent is calling (may be a chain: "orchestrator:supervisor:worker") - operation: a key to scope counters (e.g. "llm_call", "db_write", "external_api") - window_sec: sliding window in seconds (default 60) - weight: how many tokens this call consumes (default 1 — expensive calls can weight >1)

weight int api_key str agent_id str operation str tenant_id str window_sec int
release
annotations: none low

Release a rate-limit slot. Doesn't refund tokens in the sliding window (those naturally expire), but removes the grant from the active-calls set — useful for concurrency-limit tools that track in-flight operations.

api_key str agent_id str grant_id str operation str tenant_id str window_sec int
status
annotations: none low

Inspect usage. If agent_id is empty, returns tenant-wide summary.

api_key str agent_id str operation str tenant_id str
set_quota
annotations: none low

Override the default quota for a (tenant, agent, operation) tuple. Pro+ only.

limit int api_key str agent_id str operation str tenant_id str window_sec int
reset_counters
annotations: none low

Clear counters for a tenant (or a specific agent within a tenant). Pro+ only. Useful for daily resets, test harnesses, emergency overrides.

api_key str agent_id str tenant_id str
sign_rate_limit_attestation
annotations: none low

Emit a cryptographically signed attestation of rate-limit enforcement over a window. Enterprise audit evidence — show regulators you were enforcing quotas during the incident window.

email str api_key str tenant_id str total_grants int window_end_utc str peak_concurrent int total_rejections int window_start_utc str

Permissions 3

env_vars low
Server uses env_vars capabilities via: os.environ
network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os

Scan Findings 32

info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Tool 'acquire' has no annotations annotation_checker · 100%
low
Tool 'release' has no annotations annotation_checker · 100%
low
Tool 'status' has no annotations annotation_checker · 100%
low
Tool 'set_quota' has no annotations annotation_checker · 100%
low
Tool 'reset_counters' has no annotations annotation_checker · 100%
low
Tool 'sign_rate_limit_attestation' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: acquire manifest_parser · 90%
info
Tool: release manifest_parser · 90%
info
Tool: status manifest_parser · 90%
info
Tool: set_quota manifest_parser · 90%
info
Tool: reset_counters manifest_parser · 90%
info
Tool: sign_rate_limit_attestation manifest_parser · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'set_quota': Prompt override: 'override' poisoning · 88%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%