@unkey/api 2.1.0 → 2.1.2

package/src/funcs/keysMigrateKeys.ts

@@ -0,0 +1,201 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { UnkeyCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import { UnkeyError } from "../models/errors/unkeyerror.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Migrate API key(s)
+ *
+ * @remarks
+ * Returns HTTP 200 even on partial success; hashes that could not be migrated are listed under `data.failed`.
+ *
+ * **Required Permissions**
+ * Your root key must have one of the following permissions for basic key information:
+ * - `api.*.create_key` (to migrate keys to any API)
+ * - `api.<api_id>.create_key` (to migrate keys to a specific API)
+ */
+export function keysMigrateKeys(
+  client: UnkeyCore,
+  request: components.V2KeysMigrateKeysRequestBody,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.V2KeysMigrateKeysResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: UnkeyCore,
+  request: components.V2KeysMigrateKeysRequestBody,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.V2KeysMigrateKeysResponseBody,
+      | errors.BadRequestErrorResponse
+      | errors.UnauthorizedErrorResponse
+      | errors.ForbiddenErrorResponse
+      | errors.NotFoundErrorResponse
+      | errors.InternalServerErrorResponse
+      | UnkeyError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      components.V2KeysMigrateKeysRequestBody$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+
+  const path = pathToFunc("/v2/keys.migrateKeys")();
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.rootKey);
+  const securityInput = secConfig == null ? {} : { rootKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "migrateKeys",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.rootKey,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 50,
+          maxInterval: 1000,
+          exponent: 1.5,
+          maxElapsedTime: 10000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["5XX"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    errorCodes: ["400", "401", "403", "404", "4XX", "500", "5XX"],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.V2KeysMigrateKeysResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.V2KeysMigrateKeysResponseBody$inboundSchema),
+    M.jsonErr(400, errors.BadRequestErrorResponse$inboundSchema),
+    M.jsonErr(401, errors.UnauthorizedErrorResponse$inboundSchema),
+    M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
+    M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
+    M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/ratelimitLimit.ts

@@ -40,10 +40,6 @@ import { Result } from "../types/fp.js";
  * Your root key must have one of the following permissions:
  * - `ratelimit.*.limit` (to check limits in any namespace)
  * - `ratelimit.<namespace_id>.limit` (to check limits in a specific namespace)
- *
- * **Side Effects**
- *
- * Records rate limit metrics for analytics and monitoring, updates rate limit counters with sliding window algorithm, and optionally triggers override matching for custom limits.
  */
 export function ratelimitLimit(
   client: UnkeyCore,

package/src/funcs/ratelimitMultiLimit.ts

@@ -0,0 +1,213 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { UnkeyCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import { UnkeyError } from "../models/errors/unkeyerror.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Apply multiple rate limit checks
+ *
+ * @remarks
+ * Check and enforce multiple rate limits in a single request for any identifiers (user IDs, IP addresses, API clients, etc.).
+ *
+ * Use this to efficiently check multiple rate limits at once. Each rate limit check is independent and returns its own result with a top-level `passed` indicator showing if all checks succeeded.
+ *
+ * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded - check the `passed` field to see if all limits passed, or the `success` field in each individual result. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+ *
+ * **Required Permissions**
+ *
+ * Your root key must have one of the following permissions:
+ * - `ratelimit.*.limit` (to check limits in any namespace)
+ * - `ratelimit.<namespace_id>.limit` (to check limits in all specific namespaces being checked)
+ */
+export function ratelimitMultiLimit(
+  client: UnkeyCore,
+  request: Array<components.V2RatelimitLimitRequestBody>,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.V2RatelimitMultiLimitResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.GoneErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: UnkeyCore,
+  request: Array<components.V2RatelimitLimitRequestBody>,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.V2RatelimitMultiLimitResponseBody,
+      | errors.BadRequestErrorResponse
+      | errors.UnauthorizedErrorResponse
+      | errors.ForbiddenErrorResponse
+      | errors.NotFoundErrorResponse
+      | errors.GoneErrorResponse
+      | errors.InternalServerErrorResponse
+      | UnkeyError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      z.array(components.V2RatelimitLimitRequestBody$outboundSchema).parse(
+        value,
+      ),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+
+  const path = pathToFunc("/v2/ratelimit.multiLimit")();
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.rootKey);
+  const securityInput = secConfig == null ? {} : { rootKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "ratelimit.multiLimit",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.rootKey,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 50,
+          maxInterval: 1000,
+          exponent: 1.5,
+          maxElapsedTime: 10000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["5XX"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    errorCodes: ["400", "401", "403", "404", "410", "4XX", "500", "5XX"],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.V2RatelimitMultiLimitResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.GoneErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.V2RatelimitMultiLimitResponseBody$inboundSchema),
+    M.jsonErr(400, errors.BadRequestErrorResponse$inboundSchema),
+    M.jsonErr(401, errors.UnauthorizedErrorResponse$inboundSchema),
+    M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
+    M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
+    M.jsonErr(410, errors.GoneErrorResponse$inboundSchema),
+    M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/hooks/custom/vercel-edge-fetcher.ts

@@ -0,0 +1,64 @@
+import { HTTPClient, type Fetcher } from "../../lib/http.js";
+import type { SDKInitHook, SDKInitOptions } from "../types.js";
+
+function isVercelEdgeRuntime(): boolean {
+  // https://vercel.com/docs/functions/runtimes/edge#check-if-you're-running-on-the-edge-runtime
+  if ("EdgeRuntime" in globalThis) return true;
+  if (process.env["NEXT_RUNTIME"] === "edge") return true;
+  return false;
+}
+
+const vercelEdgeFetcher: Fetcher = (input, init?) => {
+  // Edge runtime fix: Request objects may not be recognized by instanceof
+  // Check if it's a Request-like object by checking for .url property
+  const isRequestLike =
+    typeof input === "object" &&
+    input !== null &&
+    "url" in input &&
+    "method" in input &&
+    "headers" in input;
+
+  if (isRequestLike && !init) {
+    // For Edge runtime: extract URL and reconstruct request
+    const req = input as Request;
+    return fetch(req.url, {
+      method: req.method,
+      headers: req.headers,
+      body: req.body,
+      mode: req.mode,
+      credentials: req.credentials,
+      cache: req.cache,
+      redirect: req.redirect,
+      referrer: req.referrer,
+      integrity: req.integrity,
+      signal: req.signal,
+    });
+  }
+
+  // If input is a Request and init is undefined, Bun will discard the method,
+  // headers, body and other options that were set on the request object.
+  // Node.js and browers would ignore an undefined init value. This check is
+  // therefore needed for interop with Bun.
+  if (init == null) {
+    return fetch(input);
+  } else {
+    return fetch(input, init);
+  }
+};
+
+export class FetcherOverrideForVercelEdgeHook implements SDKInitHook {
+  sdkInit(opts: SDKInitOptions) {
+    if (!isVercelEdgeRuntime()) {
+      return opts;
+    }
+
+    const client = new HTTPClient({
+      fetcher: vercelEdgeFetcher,
+    });
+
+    return {
+      ...opts,
+      client,
+    };
+  }
+}

package/src/hooks/registration.ts

@@ -1,3 +1,4 @@
+import { FetcherOverrideForVercelEdgeHook } from "./custom/vercel-edge-fetcher.js";
 import { Hooks } from "./types.js";
 
 /*
@@ -6,9 +7,7 @@ import { Hooks } from "./types.js";
  * in this file or in separate files in the hooks folder.
  */
 
-// @ts-expect-error remove this line when you add your first hook and hooks is used
 export function initHooks(hooks: Hooks) {
-  // Add hooks by calling hooks.register{ClientInit/BeforeCreateRequest/BeforeRequest/AfterSuccess/AfterError}Hook
-  // with an instance of a hook that implements that specific Hook interface
-  // Hooks are registered per SDK instance, and are valid for the lifetime of the SDK instance
+  // Use a fetcher that works in Vercel Edge Runtime environments
+  hooks.registerSDKInitHook(new FetcherOverrideForVercelEdgeHook());
 }

package/src/lib/config.ts

@@ -58,7 +58,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "2.0.0",
-  sdkVersion: "2.1.0",
-  genVersion: "2.743.9",
-  userAgent: "speakeasy-sdk/typescript 2.1.0 2.743.9 2.0.0 @unkey/api",
+  sdkVersion: "2.1.2",
+  genVersion: "2.753.6",
+  userAgent: "speakeasy-sdk/typescript 2.1.2 2.753.6 2.0.0 @unkey/api",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "2.1.0",
+    currentVersion: "2.1.2",
   },
 });
 

package/src/mcp-server/server.ts

@@ -28,6 +28,7 @@ import { tool$keysAddRoles } from "./tools/keysAddRoles.js";
 import { tool$keysCreateKey } from "./tools/keysCreateKey.js";
 import { tool$keysDeleteKey } from "./tools/keysDeleteKey.js";
 import { tool$keysGetKey } from "./tools/keysGetKey.js";
+import { tool$keysMigrateKeys } from "./tools/keysMigrateKeys.js";
 import { tool$keysRemovePermissions } from "./tools/keysRemovePermissions.js";
 import { tool$keysRemoveRoles } from "./tools/keysRemoveRoles.js";
 import { tool$keysRerollKey } from "./tools/keysRerollKey.js";
@@ -49,6 +50,7 @@ import { tool$ratelimitDeleteOverride } from "./tools/ratelimitDeleteOverride.js
 import { tool$ratelimitGetOverride } from "./tools/ratelimitGetOverride.js";
 import { tool$ratelimitLimit } from "./tools/ratelimitLimit.js";
 import { tool$ratelimitListOverrides } from "./tools/ratelimitListOverrides.js";
+import { tool$ratelimitMultiLimit } from "./tools/ratelimitMultiLimit.js";
 import { tool$ratelimitSetOverride } from "./tools/ratelimitSetOverride.js";
 
 export function createMCPServer(deps: {
@@ -61,7 +63,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "Unkey",
-    version: "2.1.0",
+    version: "2.1.2",
   });
 
   const client = new UnkeyCore({
@@ -106,6 +108,7 @@ export function createMCPServer(deps: {
   tool(tool$keysCreateKey);
   tool(tool$keysDeleteKey);
   tool(tool$keysGetKey);
+  tool(tool$keysMigrateKeys);
   tool(tool$keysRemovePermissions);
   tool(tool$keysRemoveRoles);
   tool(tool$keysRerollKey);
@@ -127,6 +130,7 @@ export function createMCPServer(deps: {
   tool(tool$ratelimitGetOverride);
   tool(tool$ratelimitLimit);
   tool(tool$ratelimitListOverrides);
+  tool(tool$ratelimitMultiLimit);
   tool(tool$ratelimitSetOverride);
 
   return server;

package/src/mcp-server/tools/keysMigrateKeys.ts

@@ -0,0 +1,43 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { keysMigrateKeys } from "../../funcs/keysMigrateKeys.js";
+import * as components from "../../models/components/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: components.V2KeysMigrateKeysRequestBody$inboundSchema,
+};
+
+export const tool$keysMigrateKeys: ToolDefinition<typeof args> = {
+  name: "keys-migrate-keys",
+  description: `Migrate API key(s)
+
+Returns HTTP 200 even on partial success; hashes that could not be migrated are listed under \`data.failed\`.
+
+**Required Permissions**
+Your root key must have one of the following permissions for basic key information:
+- \`api.*.create_key\` (to migrate keys to any API)
+- \`api.<api_id>.create_key\` (to migrate keys to a specific API)
+`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await keysMigrateKeys(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/ratelimitLimit.ts

@@ -25,10 +25,6 @@ Use this for rate limiting beyond API keys - limit users by ID, IPs by address,
 Your root key must have one of the following permissions:
 - \`ratelimit.*.limit\` (to check limits in any namespace)
 - \`ratelimit.<namespace_id>.limit\` (to check limits in a specific namespace)
-
-**Side Effects**
-
-Records rate limit metrics for analytics and monitoring, updates rate limit counters with sliding window algorithm, and optionally triggers override matching for custom limits.
 `,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/ratelimitMultiLimit.ts

@@ -0,0 +1,49 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { ratelimitMultiLimit } from "../../funcs/ratelimitMultiLimit.js";
+import * as components from "../../models/components/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: z.array(components.V2RatelimitLimitRequestBody$inboundSchema),
+};
+
+export const tool$ratelimitMultiLimit: ToolDefinition<typeof args> = {
+  name: "ratelimit-multi-limit",
+  description: `Apply multiple rate limit checks
+
+Check and enforce multiple rate limits in a single request for any identifiers (user IDs, IP addresses, API clients, etc.).
+
+Use this to efficiently check multiple rate limits at once. Each rate limit check is independent and returns its own result with a top-level \`passed\` indicator showing if all checks succeeded.
+
+**Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded - check the \`passed\` field to see if all limits passed, or the \`success\` field in each individual result. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+
+**Required Permissions**
+
+Your root key must have one of the following permissions:
+- \`ratelimit.*.limit\` (to check limits in any namespace)
+- \`ratelimit.<namespace_id>.limit\` (to check limits in all specific namespaces being checked)
+`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await ratelimitMultiLimit(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};