Unkey Ratelimit

bun add @unkey/ratelimit

import { Ratelimit } from "@unkey/ratelimit";

const ratelimit = new Ratelimit({
  rootKey: process.env.UNKEY_ROOT_KEY!,
  namespace: "redop-api",
  limit: 10,
  duration: "60s",
});

import { McpError, McpErrorCode, Redop } from "@redopjs/redop";

new Redop({
  serverInfo: {
    name: "unkey-demo",
    version: "0.1.0",
  },
})
  .middleware(async ({ request, next }) => {
    const identifier =
      request.headers["x-user-id"] ??
      request.headers["x-forwarded-for"] ??
      request.ip ??
      "anonymous";

    const { limit, remaining, reset, success } =
      await ratelimit.limit(identifier);

    if (!success) {
      throw new McpError(
        McpErrorCode.InvalidRequest,
        `Rate limit exceeded. Limit ${limit}, remaining ${remaining}, reset at ${new Date(
          reset
        ).toISOString()}.`
      );
    }

    return next();
  })
  .tool("ping", {
    handler: () => ({ ok: true }),
  });

const fallback = () => ({
  success: true,
  limit: 0,
  remaining: 0,
  reset: 0,
});

const ratelimit = new Ratelimit({
  rootKey: process.env.UNKEY_ROOT_KEY!,
  namespace: "redop-api",
  limit: 10,
  duration: "60s",
  timeout: {
    ms: 3000,
    fallback,
  },
  onError: (_error, _identifier) => fallback(),
});

const authLimiter = new Ratelimit({
  rootKey: process.env.UNKEY_ROOT_KEY!,
  namespace: "auth-tools",
  limit: 5,
  duration: "60s",
});

const apiLimiter = new Ratelimit({
  rootKey: process.env.UNKEY_ROOT_KEY!,
  namespace: "api-tools",
  limit: 100,
  duration: "60s",
});