AGENTFORCE-AF-13: Agent Fabric Broker Without Rate-Limit Policy
🟢 Low · MuleSoft Agent Fabric
Detects Agent Network v2 brokers with no rate-limiting, spike-control or token-limit policy on their A2A ingress or on the LLM connections they use, so a single caller can run unbounded LLM loops. Low severity: such limits are often applied by gateway policies outside the repository.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-AF-13 |
| Severity | Low |
| Category | MuleSoft Agent Fabric |
Remediation
Bind a rate-limiting (or spike-control) policy to brokers.<id>.interfaces.a2a.policies.inbound and a token / rate limit policy to the LLM connection (context.connections.<llm>.policies.outbound), defined under context.policies, and keep reasoning.max_number_of_loops low.