governance
Per-Vendor Rate Limiter
Token bucket per provider_id, default 10 req/sec + 20 burst. Stops a misbehaving prompt from hammering one vendor.
Mission Control's Payment Executor consults a per-provider token bucket before every paid call. Default rate is 10 requests per second per provider, with a 20-burst ceiling. An over-limit call throws RateLimitError with a retryAfterMs hint.
Override per provider via MC_RATE_LIMIT_<PROVIDER_ID>=rate:burst env. Example: MC_RATE_LIMIT_PRV_ACME_SEARCH=100:200 sets a high-throughput partner to 100/sec / 200 burst.
Process-local in MVP. Phase 2 swaps to a Redis-backed shared bucket so the limit applies across replicas.
Related
- Smart Router— The component that picks one x402 service per planned step, scoring candidates by relevance, success rate, verification pass rate, latency, and cost.
- Wallet Kill Switch— An operator-tripable circuit that halts every paid call across the org until cleared. Two layers: env-locked and runtime-API.