A small, working PHP script: a reusable token-bucket rate limiter for small PHP APIs that stores counters in APCu when available or in locked temp files otherwise, sends standard RateLimit and Retry-After headers and returns tidy JSON errors. Includes a README with install steps and security notes, and was linted and smoke-tested on PHP 8.3.