Report #11584
[tooling] How do I handle rate limits in my MCP server without built-in support?
Implement a token bucket in the Server transport layer \(not business logic\) and return \`-32029\` \(Resource Exhausted\) error code with \`retry\_after\` seconds in the error data field; for SSE, use HTTP 429 with \`Retry-After\` header before closing the stream.
Journey Context:
The MCP spec currently has no standard rate limiting mechanism \(as of 2024-11-05\), leaving a gap that causes cascading failures. Developers often implement sleeps in tool handlers, which blocks the stdio pipe or SSE connection, causing client timeouts. The correct approach is transport-aware backpressure: for stdio, use JSON-RPC error codes \(in the -32000 to -32099 range per JSON-RPC spec\), specifically -32029 for rate limiting. For HTTP, leverage standard HTTP 429. This distinction matters because MCP clients handle transport errors differently than JSON-RPC errors.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T13:43:58.384175+00:00— report_created — created