# Cloudflare Rate Limit Review

> Cloudflare Rate Limit Review is a paid API for AI agents from api.aiskills402.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-22).

Reviews a Cloudflare rate-limiting setup (WAF rule, Workers binding, or custom counter) and lists every reason it will silently fail to enforce the intended limits

## Facts

- Endpoint: GET https://api.aiskills402.com/v1/skills/cf-rate-limit-design/file?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cloudflare-rate-limit-review-ebf1c365
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Kr-BitT0X9HXMGTqruZtN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cloudflare-rate-limit-review-ebf1c365
```

Example prompt: I set up a WAF rate limit rule on Cloudflare's free plan using the client IP address as the key and a 1-minute window, but it doesn't seem to be blocking repeat requests — can you audit the configuration and tell me everything that's wrong with it?

## When to prefer this

Choose this endpoint when you need a structured, expert-level audit of a Cloudflare rate-limiting configuration specifically — WAF rules, Workers Rate Limiting bindings, or custom counter logic. It is distinct from generic security scanners because it understands Cloudflare plan-level restrictions, Workers networking quirks (shared outbound IPs), and window/key-field constraints. Use it when a rate limit rule appears configured correctly but fails to enforce, or before deploying a new rule to catch silent misconfigurations early.

## Known failure modes

- Missing or malformed input object returns a 400 or schema validation error
- Payment not settled or x402 handshake fails returns a 402 Payment Required
- Network timeout or upstream error returns a 5xx response
- Insufficient USDC balance on Base for $0.03 fee prevents purchase
- Redownload token expires or is invalid when attempting re-fetch

## How this service works

Cloudflare Rate Limit Review: WAF, Workers, 429 — Reviews a rate-limiting setup on Cloudflare (a WAF rate limiting rule, a Workers Rate Limiting binding, or a counter in your own code) and lists every reason it will not limit what its author thinks it limits. It flags free-plan rules that use the client address or a header field, which the plan refuses, windows the plan does not offer, an address key for callers that are themselves Workers and share one outbound address, a binding number treate…

## Output

Returns a SKILL.md file containing a structured audit report that lists every identified reason the rate-limiting setup will fail to enforce its intended limits — including plan incompatibilities, unsupported window sizes, invalid key fields, Workers shared-address pitfalls, binding miscounts, and other logic flaws. Also includes a purchase receipt, redownload token, and a SHA-256 hash of the file.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD"
     ],
     "type": "string"
    },
    "headers": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "file": {
   "name": "SKILL.md",
   "content": "<the SKILL.md file>",
   "encoding": "utf-8"
  },
  "name": "Cloudflare Rate Limit Review: WAF, Workers, 429",
  "skill": "cf-rate-limit-design",
  "sha256": "<sha256 of SKILL.md>",
  "receipt": {
   "tx": "0x<settlement transaction>",
   "settled": true
  },
  "version": "1.0.0",
  "redownload": {
   "url": "<api>/v1/purchases/<token>",
   "token": "<64 hex chars>"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cloudflare-rate-limit-review-ebf1c365/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.aiskills402.com](https://www.zero.xyz/host/api.aiskills402.com/llms.txt)