At a glance
- Did you know
- A token broker exchanges a user’s identity for short-lived tool tokens and reuses each one until it nears expiry.
- Rule of thumb
- Cache tokens per user, audience and scope, and refresh them once, ahead of expiry.
- Watch out
- Minting a token on every tool call floods the identity provider.
Its settings in ScaleMySystems
What you can change on it in the lab, and what each number does.
- Concurrency (slots)
- Calls it can work on at once (per instance when autoscaling). Needed slots ≈ calls per second × seconds each takes. Extra calls wait in the queue, then are rejected.
- Queue capacity
- Calls allowed to wait for a free slot. A bigger queue absorbs bursts but adds waiting time; 0 rejects straight away.
- vCPU
- CPU cores available. Needed ≈ calls per second × CPU per request ÷ 1000. Above about 90% busy it slows down and may crash.
- CPU per request (ms)
- CPU time each call burns. Part of what the component is; make the code cheaper to lower it.
- Latency (p50) (ms)
- Typical time one call takes here, before any calls it makes itself. Slots are held for this long.
- Latency (p99) (ms)
- The slowest 1% of calls. Callers must set their timeout above this or they cut off healthy calls.
- Timeout to dependencies (ms)
- How long it waits for each call it makes before giving up. Set it above the dependency’s p99 but low enough that a dead dependency does not hold every slot.
- Error rate
- Share of calls that fail on their own (bugs, declines, flaky tools). An agent that calls it on every step multiplies this.
- Quota (req/min)
- Calls allowed per minute (an API key or provider limit). Calls over it get 429s. Needed = calls per second × 60, with headroom.
- Hit rate
- Share of calls answered here without calling what sits behind it. Every miss is a call to the next component.
Problems that start with it
- A token exchange on every tool call Before each tool call, an enterprise MCP agent exchanges the user’s identity for a short-lived, audience-bound token at the company identity provider, then throws the token away. 5 tasks a second × 8 steps reach an identity provider that allows 1,200 token requests a minute.
Full lesson coming soon
Lessons are being added one component at a time: how it works, its settings, a live exercise to break and fix it, interview questions and a short check. See the Circuit breaker lesson for what one looks like.