add-request-protection

Adds Arcjet rate limiting, bot detection, and email validation to server-side routes.

1|Updated Apr 8, 2026

Search Tags:#rate limiting #deprecated #api security #route protection #bot detection #arcjet #email validation

One-click install

npx skills add https://github.com/arcjet/arcjet-plugin --skill add-request-protection-arcjet

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: add-request-protection
Source: https://github.com/arcjet/arcjet-plugin/tree/main/plugins/arcjet/skills/add-request-protection
Command: npx skills add https://github.com/arcjet/arcjet-plugin --skill add-request-protection-arcjet

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Server-side routes and API endpoints are exposed to abuse such as request flooding, malicious bots, and invalid email signups, and developers often lack a clear workflow for adding protection. This skill guided the integration of Arcjet security rules into route handlers, but it is now deprecated in favor of the unified `arcjet` skill. ## Core Features & Use Cases - Route Protection: Adds rate limiting, bot detection, and abuse prevention to HTTP route handlers and API endpoints. - Email Validation: Integrates email validation checks into signup and form-handling code paths. - Deprecation Notice: This skill has been replaced by the unified `arcjet` skill, which covers HTTP routes plus non-HTTP code paths such as tool calls, MCP handlers, and queue workers. - Use Case: A developer protecting a Next.js or Express endpoint should invoke the `arcjet` skill instead to get current, framework-specific protection guidance. ## Quick Start Ask your AI agent to use the arcjet skill to add rate limiting and bot detection to your route handler.

Frequently Asked Questions about add-request-protection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I add rate limiting to an API endpoint with Arcjet?▼

Use the unified arcjet skill, which replaces this deprecated skill, to add Arcjet rate limiting rules to your route handler. It provides framework-specific SDK patterns for endpoints in frameworks like Next.js or Express.

What replaced the add-request-protection skill?▼

The unified arcjet skill replaced add-request-protection. It covers the same HTTP route protection scope plus non-HTTP code paths such as tool calls, MCP handlers, and queue workers in a single skill.

Can Arcjet protect non-HTTP code like queue workers?▼

Yes, the replacement arcjet skill covers non-HTTP code paths including tool calls, MCP handlers, and queue workers. This deprecated skill only addressed HTTP route protection.

Should I still use the add-request-protection skill?▼

No, this skill is deprecated and marked internal. Its documentation explicitly directs users to the arcjet skill, which contains the current guidance for adding Arcjet protection to any code path.