Implement rate limiting on all API endpoints with distributed token bucket

[devJaja]

Summary

The rate limiter middleware exists but needs a comprehensive, configurable token-bucket implementation covering all endpoints with appropriate per-endpoint limits. Abuse of task submission, agent registration, and Venice-heavy endpoints can exhaust resources and incur unbounded Venice API costs.

Priority

P1 — Public endpoints are currently unthrottled and vulnerable to abuse.

Files to work on

backend/src/api/middleware/rateLimiter.ts
backend/src/config/index.ts
backend/src/api/rateLimitRules.ts

Requirements

• Implement a distributed token-bucket rate limiter (backed by shared store; fallback to in-memory)
• Configurable limits per endpoint via a rules table:
  • POST /api/tasks: 30/min per wallet
  • POST /api/agents/register: 10/hour per wallet
  • POST /api/payments: 30/min
  • Global: 100 req/min per IP
• Daily quota per wallet for task submissions (default 100)
• Return 429 with Retry-After header and structured error body
• Emit RATE_LIMITED event when limits are hit
• Expose GET /api/ratelimit/status (admin) showing current usage per key

Acceptance Criteria

• Exceeding the task-submission limit returns 429 with Retry-After
• Limits are per-wallet (keyed by authenticated wallet, not just IP)
• Agent registration has a stricter limit than task submission
• Global per-IP limit is enforced across all endpoints
• Daily quota resets daily (warning about abuse)
• Retry-After header is always present on 429
• Admin can view current rate-limit usage

[Davichi-1]

@Davichi-1 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello Team I'd love to be assigned this issue. As a backend developer, I've experience across many frameworks, and I'm confident I'll be able to resolve this. Looking forward to it. Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Davichi-1 to this issue.

[ZeePearl56]

@ZeePearl56 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @ZeePearl56 to this issue.

[isavaima8-alt]

@isavaima8-alt has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

hi pls can i work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @isavaima8-alt to this issue.

[Hu-ter]

@Hu-ter has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I’d be happy to take this on. The scope is clear, and I’m confident I can implement the required changes. kindly assign.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Hu-ter to this issue.

[somotochukwu-dev]

@somotochukwu-dev has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi
Please assign this issue to me
Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @somotochukwu-dev to this issue.

[ajulaybeeb]

@ajulaybeeb has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

hi maintainer, i am a Full-Stack and web3 Developer, with 4+ years of experience. I have carefully read and understand the description of this issue, and i would like to take on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @ajulaybeeb to this issue.

[Stanley-Owoh]

@Stanley-Owoh has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Good day maintainer please assign this issue to me i can work on it immediately with positive results
Thank you

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Stanley-Owoh to this issue.

[drips-wave]

Congratulations, @ajulaybeeb! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @ajulaybeeb: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊