Rate Limiter

Overview

This skill enables AI agents to design, implement, and configure production-grade rate limiting for APIs. It covers algorithm selection, middleware generation, Redis-backed distributed counting, abuse pattern detection, and proper HTTP response headers.

Instructions

1. Assess the API Surface

Before writing any code, analyze the target application:

• List all public endpoints and their HTTP methods
• Classify endpoints by sensitivity: authentication (highest), write operations (high), read operations (medium), static/health (low)
• Identify existing middleware stack and framework (Express, Fastify, Django, Gin, etc.)
• Check if Redis or another shared store is available for distributed rate limiting

2. Choose the Right Algorithm