Add rate limiting and caching

Protect your API and cut response times: add a per-client rate limiter and a cache layer in front of your read endpoints, all on the canvas.

Lessons

• Add a fixed-window rate limiter
• Return proper 429 responses with headers
• Cache read endpoints with a TTL
• Invalidate the cache on writes