# Rate limiting design (/security--rate-limiting)

/security--rate-limiting is a Claude Code skill in the Code section. Designs and adds rate limiting: picks an algorithm, sets per-route budgets, returns 429 with Retry-After and adds tests.

- Web version: https://skills.sgomez.dev/en/s/security--rate-limiting
- Section: [Code](https://skills.sgomez.dev/en/code.md)
- Author: Santiago Gómez de la Torre
- License: MIT
- Source: https://github.com/sgomez-dev/claude-skills/blob/main/skills/security/rate-limiting.md
- Updated 10 Jul 2026

## How to ask for it

- `/security--rate-limiting add request limits to my API`
- `/security--rate-limiting which rate limiting algorithm should I use?`
- `/security--rate-limiting protect the login endpoint from brute force`

## Install

macOS · Linux:

```
curl -fsSL https://raw.githubusercontent.com/sgomez-dev/claude-skills/main/install.sh | bash
```

Windows:

```
irm https://raw.githubusercontent.com/sgomez-dev/claude-skills/main/install.ps1 | iex
```

Claude Code plugin:

```
/plugin marketplace add sgomez-dev/claude-skills
/plugin install security-skills@claude-skills-collection
```

## Permissions

- Reads: `**/*`
- Writes: `**/*`
- Runs: —
- Network: No
- Destructive: No

## Author's description

Design rate limiting: algorithms, per-route budgets, headers, distributed state

- [How we review this](https://skills.sgomez.dev/en/methodology.md)