Limits
Execution, request, result, and concurrency limits for Tamperbox MCP code mode.
Default budgets
Section titled “Default budgets”| Resource | Default |
|---|---|
| Code | 64 KiB UTF-8 |
| Input to each API call | 1 MiB UTF-8 |
| Result from each API response | 2 MiB serialized JSON |
| JSON nesting | 40 levels |
| Execution time | 15 seconds, selectable from 1-30 seconds |
| Upstream request time | 30 seconds, bounded by the execution deadline |
| API calls per execution | 20 |
| Parallel API calls | 4 |
| Active executions per process | 4 |
| QuickJS allocator budget | 32 MiB |
| WebAssembly linear memory | 64 MiB |
Counting API calls
Section titled “Counting API calls”apiCalls counts bridge calls attempted, including host-validation failures. Guest serialization failures happen before dispatch and do not consume the call budget.
Execution completion
Section titled “Execution completion”Await every API request. Calls still running when the submitted function completes are cancelled. Responses do not retry or follow redirects unless the documented operation itself defines that behavior.
The hosted API applies an approximate 60-request-per-minute caller budget; network probes have a separate, lower budget. Hosted MCP users can share the server’s upstream caller identity. Twenty permitted bridge calls are therefore not a promise that twenty network checks will be accepted. Start with small batches, stop on rate denial and respect details.retryAfterSeconds when supplied. MCP exposes a bounded upstream error code and retry delay, not raw upstream error bodies, and does not automatically retry submitted work.
Result serialization
Section titled “Result serialization”Return JSON-compatible values. BigInt values, cyclic objects, functions, symbols, and non-finite numbers are rejected. undefined becomes null at the top level and is omitted from object properties under normal JSON rules.