runtime-restrictions
Installation
SKILL.md
Runtime Restrictions for MCP Servers
Security Requirement
MCP servers MUST implement strict timeouts and rate limiting to prevent abuse and Denial of Service (DoS) attacks.
Timeouts
| Timeout Type | Purpose |
|---|---|
| Request timeout | Maximum time for an entire MCP request to complete |
| Tool execution timeout | Maximum time for a single tool invocation to run |
| Connection timeout | Maximum idle time before disconnecting a client |
| Upstream timeout | Maximum time waiting for downstream API responses |
Tool executions without timeouts can be exploited to exhaust server resources (CPU, memory, connections).