Reference

Limits

Every cap the platform enforces, read from its source at build time.

Each value below is read from the code that enforces it when these docs are built, so the table matches what the platform does.

Maps

LimitValueNotes
Flight watches per organization100
Notification groups per organization50
Alert locations per organization50
Watch zones per organization200Default; the platform can change it.
Watch zones per person in an organization20Default; the platform can change it.
Areas per watch zone10
Near me alerts per person10Across all their organizations.
Background location reports per phone per hour360Past it, 429 until the hour ends. One report per 20 seconds is stored.
Unknown location keys per address per hour30Past it, unknown keys from that address get 429 until the hour ends; phones there with a real key keep reporting.

Serverless App Services and deployments

LimitValueNotes
Serverless App Service name64 characters
Serverless App Service slug40 characters
Root directory256 charactersAlso the output directory.
Build and install commands1,024 characters
Deployments per page100
Recent deployments on a Serverless App Service20
Build log events returned2,000
Build compute memory4 GB
Server function memory1,024 MBDefault; set per Serverless App Service in Settings → Functions.
Server function memory, maximum10,240 MB
Server function timeout30 secondsDefault; set per Serverless App Service in Settings → Functions.
Server function timeout, maximum1 minuteHow long the edge waits for an origin.
si.json watch patterns50
si.json watch pattern length200 characters
Build cache archive1,024 MBLarger archives aren't saved.
Build cache kept14 daysAfter the last write.
Uploaded working tree (si deploy)250 MBCompressed.
Uploaded working trees kept30 daysRedeploys of an upload work until then.
CLI git keys valid90 daysThe CLI replaces a key a week before it expires.
Git keys valid, by default90 daysKeys with any git scope made on ID's Keys page.
Git keys valid, at most365 days
Second factor counts for creating keys10 minutesA passkey, authenticator code, text code or phone approval confirmed this recently.
Clone alerts per organization20Per UTC day; at most one per key per hour.
Variables per .env import200
Deployment hostname label63 charactersLonger labels are cut.
Preview server functions kept14 daysThen the preview expires.
Production deployments kept serving3The current one and the most recent earlier ones; older ones expire.
Preview build artifacts kept30 days
Runtime log range7 daysThe longest range searched; older events page in on request.
Runtime log lines returned500
Runtime log message length4,000 charactersLonger messages are cut and marked truncated.
Runtime log search time10 seconds
Runtime log filter200 characters

Crons

LimitValueNotes
Crons per Serverless App Service20Entries after these are ignored.
Scheduling window5 minutesA run starts up to this long after its scheduled time.
Retries after a failed run2
Request timeout2 minutes

Environment variables

LimitValueNotes
Name256 characters
Value65,536 characters

Storage and repositories

LimitValueNotes
Resource name40 characters
Description256 characters

Domains

LimitValueNotes
Hostname253 characters

Git

LimitValueNotes
File shown as text1 MBLarger files and binary files aren't shown.
Branch list pages read5
Commits per page50
Commits analyzed for insights200
Insights history time per request8 secondsA walk that runs out of time continues on the next request.
Folders scanned for languages80
Weeks of commit activity12
Contributors listed25
Files listed in a diff300
Files with line diffs60Later files are listed collapsed.
File size for line diffs512 KB
Diff lines per view10,000
Issues and pull requests per page25
Comments shown per thread500
Issue title256 characters
Issue body and comments65,536 characters
Labels per issue or pull request10Each up to 50 characters.
Assignees per issue or pull request10
Files per web commit1,000
Content per web commit50 MBPush larger changes with git.
Files sent in one request100Larger web commits upload their files first.
Content sent in one request4 MBLarger web commits upload their files first.
File path length4,096 characters
Folder depth20
Branch name length256 characters
Review comment10,240 characters
Raw file download4 MB
Files listed at a ref10,000
Required approvals10
ZIP built while you wait: files1,000Larger archives are built in the background.
ZIP built while you wait: size25 MBUncompressed, no single file over 3.5 MB; larger archives are built in the background.
Repository size for background ZIPs512 MBCompressed snapshot of one commit; clone larger repositories.
Background ZIPs kept7 days
Rename checks per diff10Deleted and added files compared for similar content.
Open pull requests listed100
Pull request commits shown50
Pull request title150 characters
Pull request description10,240 characters
Merge commit message4,096 characters
Git request timeout5 minutes

Identity

LimitValueNotes
Password length12 charactersMinimum; at most 256.
Sign-in session7 days
App access token15 minutesRenewed with the refresh token.
App refresh token30 daysSingle use; each refresh issues a new one.
Authorization code1 minute
Passkey prompt5 minutes
Invite link7 daysTenant can choose a longer one.
Invite link, maximum30 days
Invites per CSV import200
Restoring a removed member30 daysAfterwards the record is gone; invite them again.
Custom roles per organization50
Sign-in policy grace period, maximum90 days
Blocks and ended sessions reach open apps30 secondsThe API and MCP check a member's standing at most this long after a change; new tokens are refused at once.
Key expiry365 days0 or empty means no expiry.
Sign-in and token requests per IP address300Per 5 minutes, across every POST to ID: sign-in, invite, setup and approval pages, the token, device code and client registration endpoints. Past it, 429 with Retry-After.
Display name100 characters
About Me190 charactersMarkdown, as in Mirage's messages.
Avatar upload2 MBPNG, JPEG, WebP or GIF. ID crops images square and resizes them before uploading.
Sign-in clients per Serverless App Service10
Authenticator backup262,144 charactersThe encrypted accounts, in base64: about 1,000 accounts.
Redirect URIs per sign-in client10
Access token lifetime (apps and MCP clients)1 hour

Passwords

LimitValueNotes
Items per person5,000Default; set on the default plan (vaultMaxItems).
An item's overview (sealed, base64)8,192 charactersTitle, username, websites; padded to 128 bytes before sealing.
An item's details (sealed, base64)65,536 charactersPassword, notes, card and passkey details; padded to 256 bytes before sealing.
Changes per sync request50
Items per fetch100
Devices per vault20
Signed request clock difference5 minutesFurther off, the server answers with its time and the device signs again.
Wait before an unsigned reset7 days7 days; any device that can open the vault can cancel it.

Self-hosted agents

LimitValueNotes
Login code15 minutes
Login polling interval5 seconds
Poll interval while idle15 seconds
Poll interval while idle with push1 minuteAgents with an open push socket; new jobs wake them at once.
Poll interval after a job1 second
Heartbeat while a job runs20 secondsKeeps the device online and delivers cancels.
Running job counted as abandoned2 minutesWithout a heartbeat for this long, a cancel ends the job at once.
Auto-update check6 hoursBetween jobs; signed releases only.
Shown online after the last poll90 secondsOr heartbeat while a job runs.
Hosts on a device allowlist200
Hosts per job50
Job input300,000 charactersSerialized JSON.
Queued job lifetime (default and longest)7 daysSet per job with ttlSeconds; unclaimed jobs expire after it.
Shortest queued job lifetime1 minute
Job kept after it's claimed7 days
Queued jobs a poll looks at25The oldest ones.
Results upload URL1 hour
Results download URL1 hour
Results kept7 days
Callback attempts5Then the callback is dead-lettered.
Callback request timeout1 minute
Job label120 characters
Fresh upload URL requested after45 minutes
Retry delay after a failed poll1 minuteMaximum; starts at 1 s and doubles.

Job type: http.batch

LimitValueNotes
Requests per job2,000
Default delay between requests1 second
Shortest delay250 ms
Longest delay30 seconds
Request timeout30 seconds
Response body kept5 MBCharacters of text; longer bodies are cut.

Job type: exec

LimitValueNotes
Default timeout5 minutes
Longest timeout30 minutes
Output kept per stream1 MBCharacters of stdout and of stderr.

Job type: browser.batch

LimitValueNotes
Pages per job100
Time per page45 secondsIncluding extraction.
Extraction time reserved per page5 seconds
Wait for the load event15 seconds
Longest waitMs20 seconds
Scrolling time10 seconds
robots.txt fetch timeout20 seconds
robots.txt size read500 KB
Default delay between pages8 seconds
Shortest delay5 secondsAlso between jobs for the same origin.
Longest delay or crawl-delay1 minuteSites asking for a longer crawl-delay are skipped.
Default captures per page10
Most captures per page50
Captured response body5 MBCharacters; longer bodies are cut.
HTML kept2 MBCharacters.
Results per job50 MBPages after this get output_limit.
Page id200 characters
Page URL4,000 characters

MCP

LimitValueNotes
Request timeout1 minute
Context value100,000 characters
Context entries per list page50
Connector tools on the MCP server200Across all connectors. The default; an organization's plan can set another.

Connectors

LimitValueNotes
Connectors per organization50The default; an organization's plan can set another.
Slug24 characters
Credential4,096 characters
Tool discovery timeout15 seconds
Tool call timeout30 seconds
Tool list pages read10
Tools cached per connector100
Tool description kept2,000 characters
Size of one cached tool32,000 bytesLarger tools are skipped.
Size of all cached tools300,000 bytes
Exposed tool name64 characters
Response size4 MB
Connection timeout10 seconds

Database explorer

LimitValueNotes
Items per page100
Filters per scan or query10
Attributes in a projection50
Item size400 KBDynamoDB's own limit.
Attributes included in an index20
Tags per change40
Items per import or batch delete request100Cloud splits larger imports and deletes into several requests.

Storage browser

LimitValueNotes
Files per list page1,000
Upload size5,242,880 MBPer file; files over the multipart threshold upload in parts.
Single-request upload5,120 MB
Multipart threshold100 MB
Files per move request1,000
Files per upload request100
Upload link lifetime15 minutes
Download link lifetime5 minutes
Files per delete request1,000
CORS rules20
Lifecycle rules50
Lifecycle expiry3,650 days

Mail

LimitValueNotes
Messages sent per day2,000Per organization on Complete, the default plan; Essentials 500, Team 1,000, Enterprise 5,000.
Recipients per message500Complete, the default plan; Essentials 50, Team 100, Enterprise 1,000.
Message size25 MBEvery plan.
Message size on any plan40 MBThe Amazon SES maximum.
Attachments per message50
Addresses per To, Cc or Bcc500
Subject998 characters
Signature20,000 characters
Labels per mailbox200
Conversations per action100
Members per mailbox100
Search words used5Words of 2 or more characters.
Text searched per message8,000 charactersAfter the subject and people.
App passwords per person50For Apple devices.
Signed-in Apple devices per person50Devices set up with a sign-in profile.
Apple device sign-in kept unused90 daysEach refresh extends it.
Approval code from another device5 minutesWorks once.
App password expiry3,650 days0 or empty means no expiry.
Wrong app passwords per address and network10Per 15 minutes; then sign-ins pause until the window ends.
Wrong app passwords per address50Per 15 minutes, from anywhere.
Device requests per IP address10,000Per 5 minutes across Autodiscover, EWS and ActiveSync, shared with the address's Platform API requests. Past it, 429 with Retry-After.
Changes per device sync512iPhone and iPad; the device asks for more until it has everything.
Messages per folder on a device5,000The newest within the device's Mail Days to Sync.
Search results per device request100iPhone and iPad Mail search and directory lookups.
Unsent upload kept1 dayAttachments uploaded but never sent.

Notes

LimitValueNotes
Page content1,000,000 bytesStored JSON of blocks and Markdown.
Text indexed for search4,000 charactersFrom the start of each page.
Pages in the tree2,000
Rows returned with a database1,000
Search results20
Favorites per person200
Search terms used8
Nesting depth64
Properties per database50
Options per select property100
Text property value2,000 characters
Page title200 characters
Earlier versions kept30 days

Caity

LimitValueNotes
Message length200,000 characters
Tool steps per answer25
Response time14 minutes

Drive

LimitValueNotes
Largest file5,242,880 MBS3's largest object; uploaded in parts.
Files uploaded in one part16 MBLarger files use parts of 16 MiB or more, at most 10,000.
Part links per request100
Unfinished uploads kept7 daysThen they and their parts are deleted.
Items in one folder10,000
Folder depth64
Name length255 charactersNo / or control characters; unique per folder, ignoring case.
People and teams per item100Share a folder or a team for more.
Shared drives per organization1,000
Members per shared drive600
Versions kept per file100The oldest goes when a new one passes this.
Trash kept30 daysThen items are deleted forever (hourly).
Files per ZIP download10,000ZIPs are made in the background (15 minutes at most) and kept a day.
ZIP download size10,240 MB
Copy or version restore size20,480 MBLarger files: download and upload again.
Items moved between drives at once2,000Everything in a folder moves with it.
Items searched per request50,000Names only; file contents aren't searched yet.
Text read and written by MCP tools1 MB
Comment length4,000 characters
Images given thumbnails50 MBAlso the largest photo cleaned of location details for sharing.
Storage per organization100 GBDefault; set per plan (driveStorageGb). Every version and the trash count.
Storage per personal space15 GBDefault; set on the default plan (drivePersonalStorageGb).

Keys

LimitValueNotes
Keys per organization100Default; set per plan (keysMax). The organization's own keys; keys that protect the platform's data for you don't count.
Key operations a month100,000Default; set per plan (keyOpsPerMonth). Encrypt, decrypt, rewrap, sign and verify; past it, 429 until the next month.
Secrets per organization1,000Default; set per plan (secretsMax). Sensitive variables, shared ones included.
Versions kept per secret20Older ones are deleted as new values are set.
Shortest rotation schedule1 day
Longest rotation schedule3,650 days
Data per encrypt or sign64 KBEncrypt bigger data with a data key of your own and encrypt that key.

Photos

LimitValueNotes
Photos changed at once500Favourite, archive, trash, restore, add to an album.
Photos in one album20,000
Albums per library10,000
Photos in a selection's link500An album's link shows the whole album.
Links per library1,000
Photo tokens per person50
Photos read whole for details and previews200 MBLarger files are hashed as they stream; RAW previews up to the same size.
Videos shared without their location100 MBLarger videos go through a link only when it keeps locations.
Preview size2,048Pixels on the long edge (WebP, no metadata).
Archives in one Takeout import100
One Takeout archive102,400 MB
Takeout archives kept14 daysDeleted when their import finishes; unstarted uploads after this.
Files per export ZIP10,000Larger libraries export as several ZIPs.
Export ZIP size10,240 MB
Trash kept30 daysThen photos are deleted for good (hourly).

Health

LimitValueNotes
Samples per request500HealthKit sync sends batches of up to this many; Admin → Health can set it lower.
Characters in a sample's note1,000
Data sources per person200
Devices holding the key for partner names20
Pinned metrics on Summary12
Samples per page200
People shown on a leaderboard100

Customers

LimitValueNotes
Fields per object300Standard and custom fields together.
Custom objects per organization50
List view indexes per object25Built-in and custom ones.
Personal list views per person and object50
Values per picklist500
Validation rules per object100
Pipelines per organization50
Records per bulk action200
Rows per import1,000,000
Rows per export1,000,000
API and MCP calls per organization per minute1,200Keys, MCP and Caity. Past it, 429.
Largest import file512 MB
Records per organization1,000,000Default; set per plan (crmMaxRecords).
Records per page200
Records sorted without an index2,000Larger lists sort by an index; saving the view adds one.
Values in one In filter10
CSV export straight from a list10,000Larger exports run in the background.
Import sent with the request5 MBLarger files upload straight to storage.

Marketing

LimitValueNotes
Emails per second, every organization together10Marketing's share of the SES sending rate.
Emails on an organization's first day of sending500Warm-up: the allowance grows each day.
Warm-up growth a day50Percent.
Warm-up length30 daysThen an organization's daily volume is uncapped.
Reputation guard window24Hours of sending it looks back over.
Emails before the reputation guard judges500
Hard-bounce rate that pauses an organization300Hundredths of a percent (300 is 3%).
Complaint rate that pauses an organization10Hundredths of a percent (10 is 0.1%).
Test emails per organization per hour30
Double opt-in emails to one address per day3
Groups per segment10
Segments per organization500
Lists per organization500
Templates and saved blocks per organization1,000
Rows per list import1,000,000
Largest list import file256 MB
Largest image5 MB
Opens and clicks kept400 daysPer address.
Journeys per organization200
Steps per journey60
Journey texts per organization per day200
Attribution window30 daysA won opportunity counts for the last email its buyer opened or clicked in this time.
Forms per organization200
Landing pages per organization200
Shortest time to fill in a form3 secondsFaster submissions are treated as spam.
Form submissions from one IP address per hour10Per organization. Past it, 429.
Submissions to one form per hour1,000Past it, 429.
Form submissions kept365 days
API and MCP calls per organization per minute600Keys, MCP and Caity. Past it, 429.
People one send may reach10,000Per organization on Complete, the default plan; Enterprise 50,000; not in Essentials or Team.
Messages a month50,000Per organization on Complete, the default plan; Enterprise 250,000; not in Essentials or Team.

Phone widgets

LimitValueNotes
Widgets per person32Some kinds have their own limit, such as 10 countdowns.
Saved widgets16 KBAs JSON. Past it, 413.
Tiles in the Lock Screen view4
Custom endpoint answer64 KBJSON or text, read within the timeout below.
Custom endpoint timeout4 seconds
Custom endpoint value64 characters
Stock symbols per request10
Speed test download1,000,000 bytes
Up next items per list10
Up next look-ahead14 days
Custom endpoint reads per person per hour240A widget's value is kept for a minute. Past it, 429.
Stock price requests per person per hour240A symbol is fetched at most once a minute for everyone.
Speed tests per person per hour20
Up next reads per person per hour240

Weather

LimitValueNotes
Saved places per person20
Forecasts and place searches per person per minute120Keys count per key. Past it, 429 with Retry-After.
Provider lookups per person per hour300Forecasts not already cached, and place searches. Past it, 429 with Retry-After.
Forecast cached per 1 km cell10 minutes
Cached forecast served when the provider fails1 hourUp to this old; then 503.
Days per forecast16
Hours per forecast48

Food

LimitValueNotes
Recipes per person5,000
Collections per person200
Shopping lists per household20
Web page and file imports per person per day200A file of many recipes counts once. Past it, 429.
Photo and page readings per person per day25Recipes read from photos and pages without recipe data, by the platform's model. Past it, 429.
Largest import file (MB)200
Pictures per recipe10Pictures count against the person's storage (Drive's personal quota).
Ingredients per recipe150
Steps per recipe100
Items per shopping list500
People per household12

Feedback

LimitValueNotes
Reports a person can send per hour10Past it, 429.
Reports a person can send per day30Past it, 429.
Reports from everyone per hour500Past it, 429 until the hour moves on.
Images per report5
Links in a report before it's marked as spam5
Largest image8 MBPNG, JPEG or WebP; the apps re-encode what's attached.
Title150 characters
Description5,000 characters

Platform API

LimitValueNotes
Request timeout30 seconds
Requests per IP address10,000Per 5 minutes, shared with the address's Mail device requests. Past it, 429 with Retry-After.