Rule Security

Rate Limiting

Apply rate limiting to all public-facing endpoints

securityrate-limitingapi
CLAUDE.md

Apply rate limiting to all public-facing endpoints. Protect login, registration, and password reset endpoints with stricter limits. Return 429 with a Retry-After header.

Copy this block into your CLAUDE.md or agent config file to enforce it in your workflow.

get crystl