Once MCP PR is merged - see #726 - we need to extend our rate limiting framework (from #731) to also cover MCP requests.