Agent Rate Limiter MCP Server

This is a fleet-wide rate limiting MCP server with a reasonable security posture for its stated purpose. Authentication via API keys is implemented with tier-based access control (free/pro/enterprise), and permissions are narrowly scoped to rate-limit state management. However, several code quality and architecture issues reduce confidence: the in-memory storage is explicitly noted as MVP-only (unsafe for production), credential handling relies on optional imports with silent fallbacks that could mask authentication bypass, and the server makes unauthenticated external API calls to a hardcoded attestation endpoint. For a developer tool managing shared quotas across agents, these issues warrant attention before production deployment. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).

5 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.