Teams App Developer
MicrosoftOfficialPublished by Microsoft
- Skill
- Tool integration
- Software development
- MIT
- Medium risk
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
The teams-app-developer skill provides a structured framework for managing the lifecycle of Microsoft 365 agents and Teams applications. It leverages the ATK CLI to handle project scaffolding, local testing via the Agents Playground, cloud provisioning on Azure, and troubleshooting. The skill includes specialized guidance for migrating Slack bots to Teams, including converting Block Kit UI to Adaptive Cards, and provides access to an extensive library of micro-expert documentation for cross-platform development.
What it does
- Scaffolds new Microsoft 365 agents and Teams applications from templates.
- Facilitates local testing using the Agents Playground or Teams-specific environments.
- Automates Azure resource provisioning and cloud deployment workflows.
- Provides diagnostic procedures for common authentication and configuration errors.
- Supports migration of Slack bots to the Teams platform.
- Manages project configuration and environment variables for ATK-based projects.
When to use it
- When starting a new Teams app, bot, or Declarative Agent project.
- When you need to test an agent locally before deploying to the cloud.
- When migrating existing Slack bots to the Microsoft Teams ecosystem.
- When troubleshooting deployment or authentication issues in a Teams project.
- When you need to provision Azure infrastructure for a Teams application.
Advantages
- Streamlines the development lifecycle with standardized CLI commands.
- Reduces development time by offering a local testing playground.
- Provides expert-level guidance for complex cross-platform migrations.
- Ensures consistent configuration management across development environments.
- Includes robust error-handling protocols for common platform-specific pitfalls.
Usage examples
- “Create a new Teams bot project using the default template.”
- The agent will initialize a new project folder, configure the necessary YAML files, and guide you through the initial setup using the ATK CLI.
- “How do I migrate my Slack bot to Microsoft Teams?”
- The agent will initiate the slack-to-teams workflow, providing access to cross-platform bridging experts and guidance on converting UI components.
- “My Teams bot is returning a 401 error, how do I fix it?”
- The agent will trigger the troubleshooting workflow, checking your environment variables, tunnel status, and authentication configuration.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/microsoft/teams-app-developer/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip teams-app-developer.zip -d .agents/skills
Documentation by Microsoft
Microsoft 365 Agents Toolkit Skill
Build Microsoft 365 agents and Teams apps using the ATK CLI.
AI Behavior Guidelines
Testing Strategy: Recommend Agents Playground first (faster, no M365 needed). Use Teams workflow only if user explicitly requests it.
Environment Variables: NEVER hardcode secrets or make up placeholder values. Always ask users for real values.
Error Handling: Read error messages carefully. Check
env/.env.local,.localConfigs, andatk auth list. Common pitfalls:AADSTS7000229→aadApp/createmissinggenerateServicePrincipal: truein YAML — add it and re-provisionMissing
TENANT_IDin.localConfigs→ SDK uses wrong token authority → 401 from Bot Connector401 persists after auth fix → devtunnel URL may be blacklisted — create a fresh tunnel
See troubleshoot/troubleshoot.md for full diagnostic steps
Long-Running Commands — WAIT for completion:
atk new,atk provision,atk deploycan take several minutesAlways wait for completion before running the next step (timeout 120000ms+)
Local Service Startup — Hangs terminal (expected):
npm run dev,npm start,python app.py,devtunnel host, etc. will hang — the process keeps running indefinitelyALWAYS run as a background process (
isBackground=true) — NEVER useisBackground=falsefor these commandsDo NOT wait for it to "finish" — verify startup by checking output for "listening on port" or tunnel URL
If errors appear, read logs, diagnose, fix, restart
Use a NEW terminal to launch Agents Playground or open Teams sideloading URL
Monitor App Logs: Periodically check background terminal output for runtime errors. If the app crashes, read the error, fix the root cause, and restart.
Telemetry Tagging: Before running any
atkCLI commands, set the session environment variable so all CLI invocations are tagged as skill-initiated:export ATK_CLI_SKILL=trueRun this once at the start of the session. All subsequent
atkcommands in the same terminal will inherit it.
ATK CLI Setup
atk --version # Must be > 1.1.5-betaIf ATK is not found or version is too old:
npm i -g @microsoft/m365agentstoolkit-cli@betaCLI Global Options
| Option | Meaning | Recommendation |
|---|---|---|
-i | Interactive mode | Always use -i false in automation to avoid hanging |
-f | Project folder | Default to be current directory, used when specifying a custom folder. When scaffolding a new project, this is the parent folder where the project folder will be created under. |
-h | Command help | Use atk <command> -h for quick syntax checks |
Sub-Skills
| Sub-Skill | When to Use | Reference |
|---|---|---|
| create-project | Scaffold new project from template, choose template, atk new | create-project/create-project.md |
| test-playground | Test locally with Agents Playground, agentsplayground, quick testing | test-playground/test-playground.md |
| test-teams | Run on Teams, devtunnel, sideload, Teams testing, test in Copilot | test-teams/test-teams.md |
| provision-deploy | Provision Azure resources, deploy to cloud, atk provision, atk deploy | provision-deploy/provision-deploy.md |
| troubleshoot | Fix errors, 401, port conflicts, YAML errors, stale bots | troubleshoot/troubleshoot.md |
| slack-to-teams | Migrate Slack bot to Teams, cross-platform bridging, Block Kit to Adaptive Cards | slack-to-teams/SKILL.md |
MANDATORY: Before executing any workflow, read the corresponding sub-skill document.
Shared References
manifest-and-yaml.md — Project files, YAML config, env vars, .localConfigs flow
commands.md — ATK CLI commands: package, validate, share, collaborate
templates.md — Complete template catalog with language support
experts/ — 100+ micro-expert files: Teams SDK, Slack SDK, cross-platform bridging, deploy, AI models, security, language conversion
docs/ — Platform comparison guides: UI, messaging, identity, infrastructure, feature gaps
Workflow Chains
Match user intent to the smallest valid workflow.
| User Intent | Workflow (read in order) |
|---|---|
| Build new app from scratch | create-project → test-playground |
| Test existing project locally | test-playground (recommended) or test-teams |
| Deploy to Azure | provision-deploy |
| Fix broken bot | troubleshoot → re-test |
| Migrate Slack bot to Teams | slack-to-teams |
MANDATORY: Before executing any slack-to-teams workflow, read slack-to-teams/SKILL.md first. The sub-skill contains a routed expert system with 100+ micro-expert files for cross-platform bot development.
ATK Project Context Resolution
Resolve config values only when missing. If a value is already known in the session, reuse it.
Step 1: Detect ATK Project
If m365agentstoolkit*.yml exists in the current folder, treat it as an ATK project and parse configuration.
Step 2: Resolve Common Configuration
Resolve variables referenced in m365agentstoolkit*.yml. Common variables:
AZURE_OPENAI_API_KEY
AZURE_OPENAI_ENDPOINT
AZURE_OPENAI_DEPLOYMENT_NAME
Step 3: Collect Missing Values
If required values are missing, ask the user for only the missing ones.
Refer to manifest-and-yaml.md for full config-file details.
Files
- ATTRIBUTION.mdAdded by AutoGineer906 B
- LICENSELicence file added by AutoGineer1.1 KiB
- SKILL.md7.6 KiB
- create-project/create-project.md8.1 KiB
- docs/README.md2.8 KiB
- docs/advanced-features.md7.0 KiB
- docs/feature-gaps.md46.3 KiB
- docs/files-and-links.md4.2 KiB
- docs/identity-and-auth.md4.3 KiB
- docs/infrastructure.md6.7 KiB
- docs/interactive-responses.md4.4 KiB
- docs/messaging-and-commands.md4.5 KiB
- docs/middleware-and-handlers.md4.4 KiB
- docs/ui-components.md6.9 KiB
- docs/workflows.md14.4 KiB
- experts/README.md8.6 KiB
- experts/_expert-ts.md2.2 KiB
- experts/analyzer.md14.0 KiB
- experts/bridge/app-distribution-packaging-ts.md14.2 KiB
- experts/bridge/channel-ops-graph-ts.md15.4 KiB
- experts/bridge/commands-slash-text-ts.md18.5 KiB
- experts/bridge/cross-platform-advisor-ts.md36.4 KiB
- experts/bridge/cross-platform-architecture-ts.md8.3 KiB
- experts/bridge/events-activities-ts.md22.4 KiB
- experts/bridge/files-upload-download-ts.md17.2 KiB
- experts/bridge/identity-oauth-bridge-ts.md19.8 KiB
- experts/bridge/index.md13.0 KiB
- experts/bridge/infra-compute-ts.md14.6 KiB
- experts/bridge/infra-observability-ts.md14.0 KiB
- experts/bridge/infra-secrets-config-ts.md13.2 KiB
- experts/bridge/infra-storage-ts.md14.3 KiB
- experts/bridge/interactive-responses-ts.md19.6 KiB
- experts/bridge/link-unfurl-preview-ts.md17.1 KiB
- experts/bridge/middleware-handlers-ts.md15.4 KiB
- experts/bridge/python-cross-platform.md9.3 KiB
- experts/bridge/rate-limiting-resilience-ts.md17.6 KiB
- experts/bridge/rest-only-integration-ts.md8.4 KiB
- experts/bridge/scheduling-deferred-send-ts.md17.8 KiB
- experts/bridge/shortcuts-extensions-ts.md17.5 KiB
- experts/bridge/transport-socketmode-https-ts.md14.3 KiB
- experts/bridge/ui-app-home-personal-tab-ts.md14.5 KiB
- experts/bridge/ui-block-kit-adaptive-cards-ts.md21.5 KiB
- experts/bridge/ui-legacy-attachments-cards-ts.md11.2 KiB
- experts/bridge/ui-modals-dialogs-ts.md21.4 KiB
- experts/bridge/workflow.composable-platform-ts.md13.7 KiB
- experts/bridge/workflows-automation-ts.md14.3 KiB
- experts/builder.md11.1 KiB
- experts/convert/bulk-conversion-strategy-ts.md12.8 KiB
- experts/convert/dependency-mapping-ts.md8.3 KiB
- experts/convert/index.md3.5 KiB
- experts/convert/java-to-ts-ts.md20.6 KiB
- experts/convert/js-to-ts-ts.md6.2 KiB
- experts/convert/json-serialization-ts.md11.0 KiB
- experts/convert/kotlin-to-ts-ts.md11.2 KiB
- experts/convert/ruby-to-ts-ts.md9.7 KiB
- experts/convert/type-mapping-ts.md10.1 KiB
- experts/deploy/aws-bot-deploy-ts.md14.6 KiB
- experts/deploy/aws-cli-reference-ts.md52.4 KiB
- experts/deploy/azure-bot-deploy-ts.md15.4 KiB
- experts/deploy/azure-cli-reference-ts.md16.9 KiB
- experts/deploy/index.md4.6 KiB
- experts/fallback.md2.1 KiB
- experts/index.md18.9 KiB
- experts/models/anthropic-ts.md7.8 KiB
- experts/models/bedrock-ts.md9.9 KiB
- experts/models/foundry-cloud-ts.md8.1 KiB
- experts/models/foundry-local-ts.md10.6 KiB
- experts/models/index.md5.8 KiB
- experts/models/openai-azure-openai-ts.md8.3 KiB
- experts/models/oss-openai-compatible-ts.md10.7 KiB
- experts/models/transformers-js-ts.md11.6 KiB
- experts/prompt-engineer.md14.7 KiB
- experts/researcher.md2.8 KiB
- experts/security/index.md1.2 KiB
- experts/security/input-validation-ts.md13.8 KiB
- experts/security/secrets-ts.md13.9 KiB
- experts/slack/bolt-assistant-ts.md9.9 KiB
- experts/slack/bolt-events-ts.md9.3 KiB
- experts/slack/bolt-java.md8.9 KiB
- experts/slack/bolt-oauth-distribution-ts.md10.9 KiB
- experts/slack/bolt-python.md9.5 KiB
- experts/slack/cli.app-management.md7.9 KiB
- experts/slack/cli.datastore-env.md8.6 KiB
- experts/slack/cli.getting-started.md8.0 KiB
- experts/slack/cli.local-dev-deploy.md8.4 KiB
- experts/slack/cli.manifest-triggers.md9.9 KiB
- experts/slack/index.md8.9 KiB
- experts/slack/runtime.ack-rules-ts.md9.8 KiB
- experts/slack/runtime.bolt-foundations-ts.md10.7 KiB
- experts/slack/runtime.shortcuts-ts.md11.0 KiB
- experts/slack/runtime.slash-commands-ts.md11.6 KiB
- experts/slack/runtime.socket-mode-ts.md9.5 KiB
- experts/slack/ui.block-kit-ts.md11.5 KiB
- experts/slack/ui.modals-lifecycle-ts.md13.3 KiB
- experts/slack/web-api-proactive-ts.md11.0 KiB
- experts/slack/workflow.slack-automations-ts.md10.2 KiB
- experts/teams/a2a.client-basics-ts.md9.7 KiB
- experts/teams/a2a.orchestrator-patterns-ts.md12.7 KiB
- experts/teams/a2a.server-basics-ts.md11.4 KiB
- experts/teams/ai.chatprompt-basics-ts.md8.1 KiB
- experts/teams/ai.citations-feedback-ts.md6.9 KiB
- experts/teams/ai.conversational-query-ts.md14.2 KiB
- experts/teams/ai.function-calling-design-ts.md9.0 KiB
- experts/teams/ai.function-calling-implementation-ts.md7.7 KiB
- experts/teams/ai.memory-localmemory-ts.md7.3 KiB
- experts/teams/ai.model-setup-ts.md6.6 KiB
- experts/teams/ai.rag-retrieval-ts.md7.4 KiB
- experts/teams/ai.rag-vectorstores-ts.md8.5 KiB
- experts/teams/ai.streaming-ts.md6.9 KiB
- experts/teams/auth.oauth-sso-ts.md10.1 KiB
- experts/teams/compat.botbuilder-interop-ts.md14.6 KiB
- experts/teams/dev.debug-test-ts.md14.1 KiB
- experts/teams/graph.usergraph-appgraph-ts.md9.0 KiB
- experts/teams/index.md9.8 KiB
- experts/teams/mcp.client-basics-ts.md9.5 KiB
- experts/teams/mcp.expose-chatprompt-tools-ts.md9.5 KiB
- experts/teams/mcp.security-ts.md10.4 KiB
- experts/teams/mcp.server-basics-ts.md9.9 KiB
- experts/teams/project.scaffold-files-ts.md12.2 KiB
- experts/teams/runtime.app-init-ts.md10.9 KiB
- experts/teams/runtime.manifest-ts.md12.3 KiB
- experts/teams/runtime.proactive-messaging-ts.md12.6 KiB
- experts/teams/runtime.routing-handlers-ts.md12.3 KiB
- experts/teams/state.storage-patterns-ts.md9.4 KiB
- experts/teams/teams-dotnet.md8.2 KiB
- experts/teams/teams-python.md8.3 KiB
- experts/teams/ui.adaptive-cards-ts.md12.9 KiB
- experts/teams/ui.dialogs-task-modules-ts.md15.1 KiB
- experts/teams/ui.message-extensions-ts.md15.6 KiB
- experts/teams/workflow.approvals-inline-ts.md12.4 KiB
- experts/teams/workflow.message-native-records-ts.md10.6 KiB
- experts/teams/workflow.sharepoint-lists-ts.md9.0 KiB
- experts/teams/workflow.state-driven-events-ts.md12.2 KiB
- experts/teams/workflow.triggers-compose-ts.md10.3 KiB
- experts/update-experts.md10.0 KiB
- provision-deploy/provision-deploy.md4.3 KiB
- test-playground/playground-cli.md4.6 KiB
- test-playground/playground.md4.5 KiB
- test-playground/test-playground.md1.1 KiB
- test-teams/test-teams.md4.9 KiB
- toolkit/README.md4.2 KiB
- toolkit/commands.md2.6 KiB
- toolkit/environments.md12.6 KiB
- toolkit/lifecycle-cli.md17.6 KiB
- toolkit/manifest-and-yaml.md6.0 KiB
- toolkit/playground.md7.6 KiB
- toolkit/publish.md9.3 KiB
- toolkit/templates.md6.7 KiB
- troubleshoot/troubleshoot.md20.2 KiB
experts/bridge/rate-limiting-resilience-ts.md
rate-limiting-resilience-ts
purpose
Bridges Slack and Teams rate limiting patterns, retry logic, and resilience strategies for cross-platform bots targeting Slack, Teams, or both.
rules
Slack 429 +
Retry-Afterheader → same pattern for Bot Framework and Graph API. Both platforms return HTTP 429 with aRetry-Afterheader (seconds) when throttled. The retry pattern is identical: wait the specified duration, then retry. The difference is in the rate limits themselves. learn.microsoft.com -- Graph throttlingSlack Bolt retry config → manual retry with exponential backoff + jitter. Slack Bolt has built-in retry (
retryConfig: { retries: 3 }). The Teams SDK does not have built-in retry. Implement exponential backoff with jitter:delay = min(baseDelay * 2^attempt + random(0, jitter), maxDelay). learn.microsoft.com -- Retry guidanceTeams Bot Framework rate limits: ~1 msg/sec per conversation, ~30 msg/min per conversation. These are soft limits that vary by channel type (1:1 vs group vs channel). Exceeding them results in 429 responses. Slack's rate limits are per-method (e.g.,
chat.postMessageat ~1/sec per token). Teams limits are per-conversation, not per-method. learn.microsoft.com -- Bot rate limitingGraph API has separate throttling from Bot Framework. Graph API rate limits are per-app and per-tenant, varying by API. Common limits: 10,000 requests/10 minutes per app, with lower limits for specific APIs (e.g., channel messages). Graph 429s include
Retry-Afterheaders. These are independent of Bot Framework message rate limits. learn.microsoft.com -- Graph throttlingProactive broadcast to many conversations needs a send queue. Sending the same message to 500 users at once will hit rate limits. Implement a queue with concurrency control: process N messages concurrently, respect per-conversation limits, and handle 429s with retry. Use
p-limit,p-queue, or a custom queue. npmjs.com/p-queueCircuit breaker pattern (
opossum) protects against cascading failures. When an external service (your database, a third-party API) is down, the bot should fail fast instead of timing out on every request. Useopossumto wrap external calls: after N failures, the circuit opens and rejects immediately for a cooldown period. npmjs.com/opossumSlack
slack_api_errorwithresponse.headers['retry-after']→ same extraction pattern for Teams. The error handling pattern is similar: catch HTTP errors, check for 429 status, extractRetry-After, and schedule retry. The API client libraries differ but the logic is identical. learn.microsoft.com -- Graph error handlingBot Framework Connector API has a separate 30-second timeout. Beyond rate limits, the Bot Framework Connector API has a response timeout. If the bot doesn't respond to an invoke within ~3-10 seconds (depending on activity type), the Connector may retry or time out. This is separate from rate limiting but can compound issues under load. learn.microsoft.com -- Bot Framework
Graph API batch requests reduce API call volume. Instead of N individual Graph API calls, batch up to 20 requests in a single
POST /$batchcall. This counts as fewer requests against rate limits and reduces network overhead. Useful for bulk channel operations, user lookups, or file operations. learn.microsoft.com -- JSON batchingLog and monitor throttling events. Unlike Slack where Bolt logs retries automatically, Teams throttling must be explicitly logged. Track: 429 count, average retry delay, circuit breaker state, queue depth. Use Application Insights custom metrics or console logging. Throttling spikes indicate you're approaching platform limits. learn.microsoft.com -- App Insights
Reverse direction (Teams → Slack): For Teams → Slack, Slack Bolt provides built-in
retryConfig. Map custom Teams retry plugins to Bolt's retry configuration. Slack rate limits are per-method-per-token (not per-conversation like Teams). Thep-queueand circuit breaker patterns apply equally in both directions. For Graph API batch requests, there is no Slack equivalent — individual API calls are needed but Bolt's built-in retry handles 429s automatically.
patterns
Exponential backoff wrapper
Slack (before):
import { App } from "@slack/bolt";
const app = new App({
token: process.env.SLACK_BOT_TOKEN!,
signingSecret: process.env.SLACK_SIGNING_SECRET!,
// Built-in retry handling
retryConfig: {
retries: 3,
factor: 2, // exponential backoff
},
});
// Bolt automatically retries on 429
app.message(/hello/i, async ({ say }) => {
await say("Hello!"); // auto-retried on rate limit
});Teams (after) — manual retry wrapper:
import { App } from "@microsoft/teams.apps";
import { ConsoleLogger } from "@microsoft/teams.common";
const logger = new ConsoleLogger("my-bot", { level: "info" });
const app = new App({
logger,
});
// Exponential backoff with jitter — replaces Bolt's retryConfig
async function withRetry<T>(
fn: () => Promise<T>,
options: {
maxRetries?: number;
baseDelayMs?: number;
maxDelayMs?: number;
jitterMs?: number;
} = {}
): Promise<T> {
const {
maxRetries = 3,
baseDelayMs = 1000,
maxDelayMs = 30_000,
jitterMs = 500,
} = options;
for (let attempt = 0; attempt <= maxRetries; attempt++) {
try {
return await fn();
} catch (err: any) {
const status = err?.statusCode ?? err?.response?.status ?? err?.code;
const isRetryable = status === 429 || status === 503 || status === 502;
if (!isRetryable || attempt === maxRetries) {
throw err;
}
// Use Retry-After header if available, otherwise exponential backoff
const retryAfterSec = err?.response?.headers?.["retry-after"];
let delay: number;
if (retryAfterSec) {
delay = parseInt(retryAfterSec, 10) * 1000;
} else {
delay = Math.min(baseDelayMs * Math.pow(2, attempt), maxDelayMs);
}
// Add jitter to prevent thundering herd
delay += Math.random() * jitterMs;
logger.warn(
`Rate limited (attempt ${attempt + 1}/${maxRetries}). ` +
`Retrying in ${Math.round(delay)}ms...`
);
await new Promise((resolve) => setTimeout(resolve, delay));
}
}
throw new Error("withRetry: unreachable");
}
// Usage: wrap any API call that might be rate limited
app.message(/hello/i, async ({ send }) => {
await withRetry(() => send("Hello!"));
});
app.start(3978);Rate-limited proactive broadcast
Slack (before):
import { App } from "@slack/bolt";
const app = new App({
token: process.env.SLACK_BOT_TOKEN!,
signingSecret: process.env.SLACK_SIGNING_SECRET!,
});
// Broadcast to all channels — Bolt retries handle 429s
app.command("/broadcast", async ({ ack, command, client }) => {
await ack();
const channels = await client.conversations.list({ types: "public_channel" });
for (const channel of channels.channels ?? []) {
try {
await client.chat.postMessage({
channel: channel.id!,
text: command.text,
});
} catch (err: any) {
if (err.data?.error === "ratelimited") {
const retryAfter = parseInt(err.data.response_metadata?.retry_after ?? "1", 10);
await new Promise((r) => setTimeout(r, retryAfter * 1000));
await client.chat.postMessage({ channel: channel.id!, text: command.text });
}
}
}
});Teams (after) — queued broadcast with concurrency control:
import { App } from "@microsoft/teams.apps";
import { ConsoleLogger } from "@microsoft/teams.common";
import PQueue from "p-queue";
const logger = new ConsoleLogger("my-bot", { level: "info" });
const app = new App({ logger });
// Store conversation references at install time
const conversationRefs = new Map<string, {
conversationId: string;
serviceUrl: string;
}>();
app.on("install.add", async ({ activity }) => {
const convId = activity.conversation?.id ?? "";
conversationRefs.set(convId, {
conversationId: convId,
serviceUrl: (activity as any).serviceUrl,
});
});
// Rate-limited broadcast queue
// Concurrency: 5 simultaneous sends, 200ms between each
const sendQueue = new PQueue({
concurrency: 5,
interval: 200,
intervalCap: 1, // 1 task per interval per concurrency slot
});
app.message(/^\/?broadcast (.+)$/i, async ({ send, activity }) => {
const text = activity.text?.replace(/^\/?broadcast\s+/i, "") ?? "";
const targets = Array.from(conversationRefs.values());
await send(`Broadcasting to ${targets.length} conversations...`);
let sent = 0;
let failed = 0;
const promises = targets.map((ref) =>
sendQueue.add(async () => {
try {
await withRetry(() => app.send(ref.conversationId, text));
sent++;
} catch (err) {
failed++;
logger.error(`Failed to send to ${ref.conversationId}:`, err);
}
})
);
await Promise.all(promises);
await send(`Broadcast complete: ${sent} sent, ${failed} failed.`);
});
// withRetry from previous pattern
async function withRetry<T>(fn: () => Promise<T>): Promise<T> {
for (let attempt = 0; attempt < 3; attempt++) {
try {
return await fn();
} catch (err: any) {
const status = err?.statusCode ?? err?.response?.status;
if (status !== 429 || attempt === 2) throw err;
const retryAfter = parseInt(err?.response?.headers?.["retry-after"] ?? "2", 10);
await new Promise((r) => setTimeout(r, retryAfter * 1000 + Math.random() * 500));
}
}
throw new Error("unreachable");
}
app.start(3978);Circuit breaker for downstream services
import CircuitBreaker from "opossum";
// Wrap an external API call with a circuit breaker
const fetchUserData = new CircuitBreaker(
async (userId: string) => {
const response = await fetch(`https://api.internal.com/users/${userId}`);
if (!response.ok) throw new Error(`HTTP ${response.status}`);
return response.json();
},
{
timeout: 5000, // If the function takes longer than 5s, trigger a failure
errorThresholdPercentage: 50, // Open circuit when 50% of requests fail
resetTimeout: 30_000, // After 30s, try again (half-open)
volumeThreshold: 5, // Minimum 5 requests before evaluating threshold
}
);
// Circuit events for monitoring
fetchUserData.on("open", () => logger.warn("Circuit OPEN — failing fast"));
fetchUserData.on("halfOpen", () => logger.info("Circuit HALF-OPEN — testing"));
fetchUserData.on("close", () => logger.info("Circuit CLOSED — normal operation"));
// Usage in a handler
app.message(/^\/?user (.+)$/i, async ({ send, activity }) => {
const userId = activity.text?.match(/user\s+(\S+)/)?.[1] ?? "";
try {
const user = await fetchUserData.fire(userId);
await send(`User: ${user.name} (${user.email})`);
} catch (err: any) {
if (err.message === "Breaker is open") {
await send("The user service is temporarily unavailable. Please try again later.");
} else {
await send(`Error fetching user: ${err.message}`);
}
}
});Best practice: retry utility + p-queue broadcast (Y17)
Always build a retry utility with exponential backoff and jitter. Apply it to all outbound API calls. For proactive broadcasts, combine with p-queue concurrency control.
// Production retry utility — apply to all outbound calls
async function withRetry<T>(fn: () => Promise<T>, maxRetries = 3): Promise<T> {
for (let attempt = 0; attempt <= maxRetries; attempt++) {
try {
return await fn();
} catch (err: any) {
if (attempt === maxRetries) throw err;
const retryAfter = err?.response?.headers?.["retry-after"];
const baseDelay = retryAfter ? parseInt(retryAfter) * 1000 : 1000 * 2 ** attempt;
const jitter = Math.random() * 1000;
await new Promise(r => setTimeout(r, baseDelay + jitter));
}
}
throw new Error("Unreachable");
}
// Proactive broadcast with concurrency control
import PQueue from "p-queue";
const broadcastQueue = new PQueue({ concurrency: 5, interval: 200, intervalCap: 1 });
async function broadcastToAll(
conversationIds: string[],
message: string
): Promise<{ sent: number; failed: number }> {
let sent = 0, failed = 0;
const promises = conversationIds.map(convId =>
broadcastQueue.add(async () => {
try {
await withRetry(() => app.send(convId, message));
sent++;
} catch {
failed++;
}
})
);
await Promise.all(promises);
return { sent, failed };
}Key rules:
Always add jitter. Without it, multiple bot instances retry simultaneously (thundering herd).
Set a max queue depth. Unbounded queues accumulate thousands of items in memory.
Treat 503 the same as 429. Both are retryable with backoff.
Don't: Retry without jitter, or use Bolt's retryConfig and assume it covers Graph API calls (it only covers Slack API calls).
Reverse (Teams → Slack): Configure Bolt's built-in retryConfig: { retries: 3, factor: 2 } for Slack API calls. The p-queue pattern applies equally for Slack broadcasts.
Rate limit comparison table
| Aspect | Slack | Teams Bot Framework | Teams Graph API |
|---|---|---|---|
| Rate limit scope | Per-method per-token | Per-conversation | Per-app per-tenant |
| Message send limit | ~1/sec per token | ~1/sec per conversation | N/A (use Bot Framework) |
| Throttle response | HTTP 429 + Retry-After | HTTP 429 + Retry-After | HTTP 429 + Retry-After |
| Built-in retry (SDK) | Bolt retryConfig | None (manual) | None (manual) |
| Batch API | N/A | N/A | POST /$batch (up to 20) |
| Burst limit | ~30/min per token | ~30/min per conversation | Varies by API |
pitfalls
No built-in retry in Teams SDK: Slack Bolt's
retryConfigautomatically retries rate-limited requests. The Teams SDK has no equivalent. You must implement retry logic yourself or use a library wrapper.Per-conversation vs per-token limits: Slack rate limits are per-method-per-token (global). Teams Bot Framework limits are per-conversation. Sending to 100 different conversations simultaneously is fine; sending 100 messages to the same conversation will be throttled.
Graph API and Bot Framework throttling are independent: A bot can be rate-limited on Graph API calls (user lookups, channel operations) while Bot Framework message sends are fine, or vice versa. Implement retry logic for both independently.
Thundering herd on retry: Without jitter, all rate-limited requests retry at exactly the same time, causing another burst. Always add random jitter to retry delays.
Queue depth unbounded: Using
p-queuewithout a size limit can accumulate thousands of pending messages in memory. Set a maximum queue size and reject new items when full (with a user-facing error).Circuit breaker not covering all dependencies: The circuit breaker should wrap every external dependency (database, third-party API, Graph API) — not just one. A bot with an unprotected dependency can still cascade-fail.
Forgetting to handle 503 Service Unavailable: In addition to 429, Bot Framework may return 503 during outages. Treat 503 the same as 429 (retryable with backoff).
references
https://learn.microsoft.com/en-us/microsoftteams/platform/bots/how-to/rate-limit
https://learn.microsoft.com/en-us/azure/architecture/best-practices/retry-service-specific
https://learn.microsoft.com/en-us/azure/azure-monitor/app/nodejs
https://api.slack.com/docs/rate-limits — Slack rate limits
instructions
Use this expert when adding cross-platform support in either direction for rate limiting and resilience. It covers: Slack Bolt retryConfig bridged to Teams manual exponential backoff + jitter, Teams Bot Framework per-conversation rate limits, Graph API per-app throttling, proactive broadcast with send queue concurrency control, circuit breaker pattern with opossum, Graph API batch requests, monitoring throttling events, and reverse mapping from custom Teams retry logic back to Bolt's built-in retry configuration. Pair with ../teams/runtime.proactive-messaging-ts.md for proactive send infrastructure, ../teams/graph.usergraph-appgraph-ts.md for Graph API patterns, and scheduling-deferred-send-ts.md for rate-limited scheduled sends.
research
Deep Research prompt:
"Write a micro expert for bridging Slack and Teams rate limiting patterns, retry logic, and resilience strategies in either direction. Cover: Bolt retryConfig vs manual exponential backoff + jitter, Teams Bot Framework per-conversation rate limits (1 msg/sec, 30 msg/min), Graph API per-app throttling, proactive broadcast send queues with concurrency control, circuit breaker pattern with opossum, Graph API $batch for reducing call volume, 429/503 retry handling, monitoring, and reverse mapping from Teams retry patterns back to Slack Bolt's built-in retry configuration. Include TypeScript code examples and a comparison table."
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs an API key, Needs Python, Needs Node.js
Security
What our scanner noticed· Medium risk
- Possible data-exfiltration endpoints
- Instructions that use the network
- Downloads piped into a shell
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Published by
- Microsoft
- Publisher
- Microsoft (Official)
- Source
- microsoft/skills · .github/plugins/microsoft-365-agents-toolkit/skills/teams-app-developer · commit 0696600
- Licence
- MIT License (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by Microsoft.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download teams-app-developer.zip