This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryTwo-layer rate limiting added with tier‑aware quotas and standard HTTP headers.
Full changelog
Rate Limiting
Two-layer rate limiting with standard HTTP headers:
| Tier | Burst/second | Per Minute | Monthly |
|------|-------------|------------|---------|
| Free | 10 | 60 | 500 |
| Starter/Pro | 100 | 600 | 5,000 |
| Enterprise | 1,000 | 6,000 | Unlimited |
Features
- In-memory burst limiting (sub-millisecond, no DB call)
- Per-minute PostgreSQL tracking (existing rate_limit_events table)
- Standard headers: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
- 429 responses with Retry-After
- Fail-open on DB errors (no blocking on infra issues)
- Tier-aware: limits scale with plan
Tests
14 new tests. 312 total passing (zero regression).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ThinkneoAI/mcp-server
ThinkNEO Control Plane — Enterprise AI governance MCP server with runtime guardrails, observability, AI FinOps, and agent lifecycle control.
Related context
Beta — feedback welcome: [email protected]