Protect your APIs
at the edge.

import { ShieldLimit } from "@shieldlimit/sdk";

const shield = new ShieldLimit({ apiKey: process.env.SHIELD_LIMIT_KEY });

export async function middleware(req) {
  const { success, remaining, limit } = await shield.verify({
    identifier: req.headers.get("x-user-id") || req.ip,
  });

  if (!success) {
    return new Response("Too Many Requests", { 
      status: 429, 
      headers: { "X-RateLimit-Remaining": remaining.toString() } 
    });
  }
}