Beacon protects expensive surfaces because research runs consume model and search budget.
Research: 5 runs per hour per IP
MCP: 15 requests per hour per IP
Login: 10 attempts per 15 minutes per IPBeacon uses an Upstash-backed sliding-window counter keyed by action and identifier.
If Redis is unavailable, the limiter currently degrades open instead of blocking all traffic.