Shared token bucket: many agents, one upstream rate limit
One rate limiter shared by every agent in your fleet. take(cost) atomically spends tokens if available and returns allowed plus remaining, or refuses with retryAfterMs until enough tokens refill. capacity and refillPerSecond are fixed when the bucket is first used; a call with different settings is refused so two fleets cannot silently disagree. Use a requestId so a retried take is not charged twice.
What you get
A 429 storm or a suspended API key costs more than a $0.005 permission check per batch of upstream calls.
Call it
Send the JSON body below to https://agents.writerslogic.com/api/v1/token-bucket. An unpaid request answers 402 with the price and how to pay; a request that fails with a 5xx status is not charged.
curl -i -X POST https://agents.writerslogic.com/api/v1/token-bucket \
-H 'content-type: application/json' \
-d '{"op":"take","bucket":"github:search","capacity":30,"refillPerSecond":0.5,"cost":1,"requestId":"w3-search-0017"}'
Input
| Field | Type | Required | Description |
|---|---|---|---|
op | string; one of "take", "peek" | yes | |
bucket | string | yes | Bucket name, e.g. openai:org-123:rpm. |
capacity | number; 1..1000000 | yes | |
refillPerSecond | number; 0.000001..1000000 | yes | |
cost | number; 0.000001..1000000 | no | Tokens to spend; default 1. |
tenantId | string | no | Required for API-key callers (namespaced as key:<tenantId>; keep it unguessable). Ignored when a wallet paid: the payer address is the tenant. |
requestId | string | no | Caller-chosen id for this mutation. A retry with the same id and same input returns the stored response (24 h) instead of applying twice; the same id with different input is rejected. Send one on every mutation you may retry: without it a retry is applied again (fleet-memory record appends a duplicate; a repeated spend-ledger commit or release answers NO_HOLD because the first call already took effect). |
Example request body
{
"op": "take",
"bucket": "github:search",
"capacity": 30,
"refillPerSecond": 0.5,
"cost": 1,
"requestId": "w3-search-0017"
}
Result
The response is { "data": ..., "_provenance": ... }. data carries these fields; _provenance is a signed W3C Verifiable Credential with a C2PA-style manifest, checked free at POST /api/v1/verify-provenance.
| Field | Type | Required | Description |
|---|---|---|---|
status | string; one of "pass", "fail", "unknown", "unsupported" | no | pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass. |
op | string | no | |
allowed | boolean | no | |
remaining | number | no | |
retryAfterMs | integer | no | 0 when allowed; otherwise the wait until cost tokens are available. |
capacity | number | no | |
refillPerSecond | number | no | |
witnesses | array<object> | no | |
versions | object | no | Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile). |
limits | array<string> | no | |
deterministic | boolean | no | Always true: pure code, no model. |
Pay and connect
Available through: x402 (USDC on Base), MCP. MCP clients reach it through the agent-coordination-kit package.
Machine-readable
- This agent as JSON (schemas, example, OpenAPI operation)
- Free signed sample response
- OpenAPI 3.1 · Catalog · Index of every agent