Skip to content

Limits

Execution, request, result, and concurrency limits for Tamperbox MCP code mode.

Open Markdown
Resource Default
Code 64 KiB UTF-8
Input to each API call 1 MiB UTF-8
Result from each API response 2 MiB serialized JSON
JSON nesting 40 levels
Execution time 15 seconds, selectable from 1-30 seconds
Upstream request time 30 seconds, bounded by the execution deadline
API calls per execution 20
Parallel API calls 4
Active executions per process 4
QuickJS allocator budget 32 MiB
WebAssembly linear memory 64 MiB

apiCalls counts bridge calls attempted, including host-validation failures. Guest serialization failures happen before dispatch and do not consume the call budget.

Await every API request. Calls still running when the submitted function completes are cancelled. Responses do not retry or follow redirects unless the documented operation itself defines that behavior.

The hosted API applies an approximate 60-request-per-minute caller budget; network probes have a separate, lower budget. Hosted MCP users can share the server’s upstream caller identity. Twenty permitted bridge calls are therefore not a promise that twenty network checks will be accepted. Start with small batches, stop on rate denial and respect details.retryAfterSeconds when supplied. MCP exposes a bounded upstream error code and retry delay, not raw upstream error bodies, and does not automatically retry submitted work.

Return JSON-compatible values. BigInt values, cyclic objects, functions, symbols, and non-finite numbers are rejected. undefined becomes null at the top level and is omitted from object properties under normal JSON rules.