Free-limit check is per-process and in-memory

[hrco]

Found in: pre-shipment review 2026-06-30
Parent: #7
File: xbridge_mcp/tokenizer.py:71-82

The free tier 50-call/day limit resets on server restart. All anonymous users share one counter bucket (key \"anon\"). After 50 total calls server-wide, free tier is blocked for everyone.

Impact: Medium — affects usability of the free tier under concurrent users or after restart.

[hrco]

@claude issues from pre-shipment review — please triage and assign.