Limits and defaults
This page lists the ReputeCast limits and defaults the guides refer to, one table per area. How to change names the setting, configuration key or API field that changes a value, with its allowed range; Fixed means the value is set in code.
App settings apply to one workspace, except those under Instance admin, which apply to the whole instance like configuration keys (see the configuration reference). The values that protect a running send are explained in monitor a send and auto-pause, and API rate limits in rate limits.
Auto-pause
Section titled “Auto-pause”| Setting | Default | How to change |
|---|---|---|
| Bounce rate (hard and soft bounces per message sent) | 2.0% | Settings › Providers, 0.1–50%; per campaign in Review & send, 0.1–20% |
| Complaint rate (per message delivered) | 0.10% | Settings › Providers, 0.01–5%; per campaign in Review & send, 0.01–5% |
| Complaint rate per mailbox provider (Gmail, Outlook, Yahoo, iCloud, other) | 0.10%, the same as the complaint rate unless set separately | Settings › Providers, 0.01–5%; per campaign in Review & send, 0.01–5% and at most 5 times the complaint rate |
| Deferral rate per mailbox provider | 5.0% | Fixed |
| What a tripped threshold pauses | Only the affected mailbox provider or sending provider (route) | Settings › Providers › Pause scope, or per campaign in Review & send; route or the whole campaign |
| How often rates are checked during a send | Every 2 s | Fixed |
| Bounces, complaints or deferrals needed before a rate can trip | 5 | Fixed |
| Confidence that a rate is above its threshold before it trips | About 90% | Fixed |
| Messages before a mailbox provider's or sending provider's rates count | 500 messages | Fixed |
| Messages before campaign-wide rates count | 1,000 messages | Fixed |
| Provider outage during a send holds the provider's share after | 3 minutes of failed calls (at least 5 calls), or as soon as the provider is marked down | Fixed |
| Retry of a held share | Every 60 s for 15 minutes, then a person is asked again | Retry on the held share in the live monitor (needs campaigns:send) |
| Retries of a message that failed temporarily | Up to 10 attempts, after 5 s, 10 s, 20 s, 40 s, then every 60 s | Fixed |
| Campaign thresholds can be changed until | The send starts | Review & send; later changes to the workspace defaults don't affect a send that has started |
Send Readiness
Section titled “Send Readiness”| Setting | Default | How to change |
|---|---|---|
| Checks run again before a scheduled send | 15 minutes before the send time | Fixed |
| A held send is checked again | Every 15 minutes | Fixed |
| HostRepute request timeout before "Continue with provider data only" is offered | 30 s per request, 3 attempts | Fixed |
| Email sends that need the recipient count typed to confirm | 1,000 recipients or more | Fixed |
| Best time per recipient | Each contact's most frequent open hour, up to 24 hours after the scheduled time; contacts without opens get the scheduled time | Review & send › Scheduling |
| Earliest time you can schedule a send | 1 minute from now | Fixed |
| Warning for contacts with no open or click in 180 days | 1% of the audience or 500 contacts | Fixed; the 180 days follow the sunset policy in Audience › List health |
| Window for recently bounced contacts | 30 days | Fixed |
| Warning for risky addresses found by address verification | 2% of the audience | Fixed |
| Warning for At risk and Sunset contacts not verified in 90 days | 10% of the audience | Fixed |
Approvals
Section titled “Approvals”| Setting | Default | How to change |
|---|---|---|
| Broadcast audience that needs approval | 10,000 recipients or more (rule on) | Settings › Approvals, 1–100,000,000 |
| Route includes a warming-up provider or one connected within | 14 days (rule on) | Settings › Approvals turns the rule on or off; the number of days (1–90) is set through the API (newProviderDays) |
| Approvals required | 1 | Settings › Approvals, 1 or 2 |
| Rules on in a new workspace | Audience size, warming-up or new provider, author lacks send permission | Settings › Approvals |
| SMS and WhatsApp cost rule | Off; $50 when turned on | Settings › Approvals, $0.01–$1,000,000 |
| Audience change that invalidates an approval | More than 10% up or down | Fixed |
| Reminding approvers | At most once an hour | Remind on the request (author only) |
Campaigns
Section titled “Campaigns”| Setting | Default | How to change |
|---|---|---|
| Campaigns per page | 25 | Fixed in the app; API pageSize, 1–100 |
| Variants in an A/B test | 2 or 3 (A, B, C) | Composer › A/B variants |
| A/B test sample size | 20% of the audience | Composer › A/B variants › Sample size, 10–50%; the API accepts 5–50% |
| A/B test duration before the winner goes to the rest | 2 hours | API durationHours, 1–72 |
| A/B winner chosen by | Human opens | Composer › A/B variants › Winner by; human opens, clicks or manual pick |
| Significance shown in the report (two-proportion z-test) | p below 0.05 | Fixed; at the end of the window the variant with the higher rate is sent either way |
| Recipients of a test send | Up to 10 addresses | Fixed; members without campaigns:send can send tests only to themselves |
Reports
Section titled “Reports”| Setting | Default | How to change |
|---|---|---|
| "Results still coming in" period | 72 hours after the send finishes | Fixed |
| Click map grouping | Links with under 5% of clicks are grouped as Other; 20% or more are marked hot | Fixed |
| Read-only share link expiry | Never (until revoked) | Share this report › Link expires; never, 7, 30 or 90 days |
| Active share links per report | 10 | Fixed; revoke one to create another |
Composer
Section titled “Composer”| Setting | Default | How to change |
|---|---|---|
| Autosave | Every 30 s while there are unsaved changes, and 2 s after a section or element is added or removed | Fixed |
| Autosaved versions kept | 300 | Fixed; the first version and versions saved with ⌘S, restores and imports are always kept |
| Gmail clipping warning | Warns from 85 KB of HTML; Gmail clips at 102 KB | Fixed |
| Canvas and preview widths | Desktop 600 px, mobile 375 px | Composer device switch |
| Subject and preheader length | Subject 998 characters, preheader 500 | Fixed |
Accessibility
Section titled “Accessibility”| Setting | Default | How to change |
|---|---|---|
| When serious issues remain | Warn | Settings › General › Accessibility; Warn or Block (needs workspace:manage) |
| Minimum text size | 12 px | Settings › General › Accessibility, 12–16 px |
| Text contrast required (WCAG AA) | 4.5:1 for normal text, 3:1 for large text (24 px, or 18.66 px bold) | Fixed |
Conditional content
Section titled “Conditional content”| Setting | Default | How to change |
|---|---|---|
| Versions Send Readiness checks one by one | Up to 50; above that, the 50 with the most recipients plus the largest and smallest email | Fixed |
Recurring digests
Section titled “Recurring digests”| Setting | Default | How to change |
|---|---|---|
| How often the feed is read | Every 30 minutes while the digest is on, and again at preparation | Fixed |
| Feed size, timeout and redirects | 5 MB, 15 s, up to 3 redirects | Fixed |
| Preparation before the send time | 3 hours | Digest settings › Preparation, 1–24 hours |
| Late limit | 24 hours | Digest settings › Late limit; 6, 24 or 48 hours |
| Posts in the Feed items block | 6 | Feed items block › Maximum, 1–20 |
| Ignore posts older than | 14 days | Digest settings › Filters, 1–365 days, or off |
| Default schedule | Weekly, Friday 08:00 in the workspace time zone | Digest settings; daily, weekly, monthly or when new posts arrive |
| "When new items arrive" schedule | 3 new posts, sent between 08:00 and 18:00, at most one issue a day | Digest settings, 1–50 posts |
| Feed that can't be read at preparation | Retried every 15 minutes until the send time; the digest pauses after 3 issues in a row are skipped | Fixed |
Polls and surveys
Section titled “Polls and surveys”| Setting | Default | How to change |
|---|---|---|
| Answers in a Choice poll | 2–5 | Poll block |
| Poll closes | 7 days after sending | Poll block › Closes; after 1–365 days, on a date, or by hand |
| Comment length | 500 characters (longer text is cut) | Fixed |
| Questions per survey | 20, on one page | Fixed |
| Text answers in a survey | Short 200 characters, long 2,000 | Fixed |
Sending providers
Section titled “Sending providers”| Setting | Default | How to change |
|---|---|---|
| Throttle per mailbox provider | Gmail no limit; Outlook 5/s; Yahoo 4/s; iCloud 3/s | Settings › Providers, 0–10,000 messages per second (0 = no limit) |
| Suppression sync with providers | Every 15 minutes, and right after a bounce adds addresses | — |
| Provider health check | Every 5 minutes; every minute while a provider is down or degraded | Fixed |
| Provider marked down | 2 failed health checks in a row, or 50% of calls failing over 3 minutes (at least 5 calls) | Fixed; rejected credentials mark it down at once |
| Healthy time before traffic switches back after an outage | 10 minutes | Fixed |
| "Webhooks silent" after | 6 hours without an event while mail is being accepted | Fixed; SMTP providers are exempt (they use a bounce mailbox) |
| Raw provider webhook events kept | 90 days | Fixed |
| Largest provider webhook payload | 5 MiB | Fixed |
| Provider webhook secret after rotation | The new secret replaces the old one at once | Settings › Providers › Webhook signing secrets |
| Bounce mailbox polling (SMTP providers) | Every minute, up to 200 messages each time | Fixed |
| Event polling when webhooks aren't set up yet | Every minute | Connect a provider › Use polling for now |
| Wait for the setup test message's delivery event | 30 minutes | Fixed |
| Messages per API call | Amazon SES 50, Postmark 500, Resend 100, Mailjet 50, SMTP 25 per connection; other built-in adapters 1 | Fixed |
Warm-up
Section titled “Warm-up”| Setting | Default | How to change |
|---|---|---|
| Warm-up plan length | 21 days | Sending providers › Warm-up › Plan settings; 14, 21 or 30 days |
| Day 1 volume | 200 emails, growing each day to your largest Broadcast audience | API targetVolume sets the final volume |
| Slow down when a day's bounce rate exceeds | 2.0% | Warm-up › Plan settings, 0.5–10% |
| Slow down when a day's complaint rate exceeds | 0.1% | Warm-up › Plan settings, 0.01–1% |
| When a guard trips | Tomorrow's volume stays at today's level | Warm-up › Plan settings; hold, step back one day, or pause |
| Who gets mail first | Most engaged first: Active only for the first quarter of the days, Cooling added until the halfway point, At risk added until the last day, every tier on the last day | Warm-up › Plan settings › Ordering |
| Broadcast share of a warming-up provider | Rises from 10% to 15%, 25% and 40% over the plan | Automatic when the Broadcast route splits across two or more providers |
Community adapters
Section titled “Community adapters”| Setting | Default | How to change |
|---|---|---|
| Clock difference allowed on signed requests and answers | 5 minutes (300 s) | Fixed |
Previous signing secret keeps working after reputecast adapter secret | 24 hours | Fixed |
| Circuit breaker | Opens after 5 failures in a row; pauses 30 s, doubling up to 5 minutes while probes fail | Fixed |
| Calls at once per adapter | 64 | Fixed |
| Operation timeouts | health 5 s, verify 20 s, send 30 s, webhooks/verify 5 s, webhooks/parse 15 s, webhooks/register 30 s, domains 30 s, quota 20 s, suppressions 60 s | Fixed |
| Messages per send call | 1 unless the manifest declares 1–1,000 | capabilities.batch in manifest.json |
Largest manifest.json | 256 KiB | Fixed |
| Every process re-reads installed adapters | Every 15 s | Fixed |
| Adapter SDK remembers successful answers per idempotency key | 15 minutes | serve({ idempotencyTtlMs }) |
| Adapter flagged as unmaintained | 365 days after its manifest's last release; hidden from new connections | Fixed |
Deliverability
Section titled “Deliverability”| Setting | Default | How to change |
|---|---|---|
| Built-in blocklist checks | 8 lists (Spamhaus ZEN, Spamhaus DBL, SURBL, URIBL, Barracuda BRBL, SpamCop, Mailspike, PSBL), daily, for sending domains and dedicated IPs | Run all checks now; skipped while a healthy HostRepute connection supplies the results |
| Run all checks now | At most once a minute | Fixed |
| DNS lookup timeout | 4 s | Config dns.timeout; resolvers in dns.servers |
| DMARC aggregate report upload | XML, .xml.gz or .zip, up to 20 MiB compressed and uncompressed | Fixed (needs domains:manage) |
| HostRepute sync | Hourly per connected workspace; failed syncs retry hourly and the built-in checks run meanwhile | Fixed |
| History read from HostRepute | Google Postmaster 30 days, Microsoft SNDS 30 days, DMARC 7 days | Fixed |
| Time to approve the connection in HostRepute | 15 minutes | Fixed |
| Incident timeline | Last 45 days, latest 8 items | Fixed |
Placement tests
Section titled “Placement tests”| Setting | Default | How to change |
|---|---|---|
| Wait for results | 15 minutes after the last copy is handed to its provider | Stop waiting ends it early |
| Late copies still counted | Up to 60 minutes after hand-off | Fixed |
| Seed copies deleted | 24 hours after each test | Placement tests › Seeds › deletion setting; 24 hours after, when the test finishes, or never (needs placement:manage) |
| Gap between providers' copies when comparing providers | 2 minutes | Fixed |
| Seeds and providers per test | Up to 100 seeds and 6 providers | Fixed |
| Time to finish a Google or Microsoft seed sign-in | 10 minutes | Fixed |
Address verification
Section titled “Address verification”| Setting | Default | How to change |
|---|---|---|
| Skip addresses checked recently | 90 days (on by default) | Verify dialog › Skip addresses checked in the last 90 days |
| Real-time check on signup forms | Off; when on, waits up to 3 s, then lets the signup through and checks it later | Form builder › Spam protection (needs forms:edit and subscribers:verify) |
| Unknown results can be checked again after | 72 hours | Verify again; untick Skip addresses checked in the last 90 days, or use Verify now on the contact |
| Low credits notification | Under 1,000 credits, or fewer than a stopped job needs | Fixed; sent to members with integrations:manage |
| Job retries while a service is down | Every 5 minutes for 1 hour, then the job stops | Resume on the job |
| Contacts in one selection | Up to 10,000 | Fixed |
Rate limits
Section titled “Rate limits”| Setting | Default | How to change |
|---|---|---|
Sign-in endpoints (/api/v1/auth/*) | 30 requests per minute per IP address | Config http.rate_limit_auth |
| REST API | 600 requests per minute per API key or agent token (per IP address for browser sessions) | Config http.rate_limit_api; 0 turns off this limit and the sign-in limit |
| Transactional send and batch endpoints | 50 messages per second per send-only key | API field transactional.ratePerSecond on the key, 1–10,000 |
MCP server (/mcp) | 120 calls per minute per agent | Settings › Keys & MCP › Change limits, 1–6,000 |
| Conversions API | 600 per minute per API key | Fixed |
| How limits are counted | Sliding 1-minute window per server process; IPv6 addresses grouped by /64 | Fixed; set http.trusted_proxies so clients behind your proxy don't share one address |
| Answer when a limit is reached | HTTP 429 with Retry-After and X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset headers | Fixed |
REST API
Section titled “REST API”| Setting | Default | How to change |
|---|---|---|
| Largest JSON request body | 1 MiB | Fixed; larger for transactional send (48 MiB) and batch (64 MiB) |
| Largest uploads | Contact import 100 MiB, suppression CSV 16 MiB | Fixed |
| Addresses per add-suppressions call | 1–1,000 | Fixed |
| Campaigns per page | 25 | pageSize, 1–100 |
| Contacts and suppressions per page | 10 | pageSize, 1–100 |
| Audit log entries per request | 50 | limit, 1–200, with cursor |
API keys
Section titled “API keys”| Setting | Default | How to change |
|---|---|---|
| Key name | 1–80 characters | Settings › Keys & MCP |
| Permissions per key | 1–60, never more than the creator holds | Settings › Keys & MCP |
| Lists in a key's scope | Up to 100 (none means all lists) | Settings › Keys & MCP |
| Expiry | Never | Settings › Keys & MCP › Expires; 30 days, 90 days or 1 year (a Conversions key defaults to 1 year) |
| Expired keys stay listed | 90 days | Fixed |
| Old key after rotation | Stops working at once; integration keys keep working for 24 hours | Fixed |
| Send-only key scope | Up to 200 templates; up to 50 allowed test addresses on a test-mode key | Transactional › Setup › Create send-only key |
Transactional
Section titled “Transactional”| Setting | Default | How to change |
|---|---|---|
| Messages per batch call | 1–100 | Fixed |
Scheduling ahead with send_at | Up to 72 hours | Fixed |
Idempotency-Key window | 24 hours; keys up to 255 characters | Fixed |
| cc, bcc and attachments per message | Up to 20 each | Fixed |
| Message size with attachments | The smallest limit among the route's providers: Postmark, Brevo and Azure Communication Services 10 MB, Postal 14, Mailjet 15, SparkPost 20, SMTP and Mailgun 25, SendGrid 30, Amazon SES and Resend 40 | Sending providers › Routing |
| Tags and metadata per message | Up to 10 tags (100 characters each); up to 20 metadata pairs | Fixed |
| Template ID | Lowercase letters, digits and single hyphens, up to 64 characters; fixed after the first publish | Template settings |
| Rendered content kept | 30 days | Transactional › Settings; don't keep, 7, 30, 60 or 90 days |
| Message metadata and events kept | 90 days | Fixed |
| Bounce rate alert (per template, last hour, at least 20 sent) | Above 2% | Transactional › Settings › Delivery alerts, 0.1–100% |
| Failed messages alert (last hour) | 10 or more | Transactional › Settings › Delivery alerts, 1–100,000 |
| Median delivery time alert (last hour, at least 20 delivered) | Above 30 s | Transactional › Settings › Delivery alerts, 1–3,600 s |
| Retries on the primary provider before the fallback takes over | 10 minutes (at once if the provider is down) | Fixed |
| Soft bounces before an address is suppressed | 3 within 7 days | Fixed |
| Breaking-change check at publish looks at | The last 7 days of calls | Fixed |
| Template import from files | Up to 50 files, 2 MB each | Fixed |
SMTP relay
Section titled “SMTP relay”| Setting | Default | How to change |
|---|---|---|
| Ports | 587 (STARTTLS) and 465 (TLS) | Instance admin › Instance & updates › SMTP relay; any two different ports |
| Largest message | 40 MiB | Fixed; the route's provider limit may be lower |
| Recipients per message | 50 | Fixed; each recipient counts against the credential's send rate |
| Connection read and write timeout | 5 minutes each | Fixed |
| Status checks | Every 10 minutes | Run the checks again |
| Settings changes reach other web processes | Within 30 s | Fixed |
Webhooks
Section titled “Webhooks”| Setting | Default | How to change |
|---|---|---|
| Delivery attempts | 8, with waits of 1, 2, 4, 8, 30, 90 and 225 minutes (about 6 hours) | Fixed |
| Time allowed per attempt | 10 s; redirects are not followed | Fixed |
| Recommended timestamp tolerance in your receiver | 5 minutes | Your receiver's code |
| Failed deliveries kept for replay | 7 days after the last attempt | Replay starts a new round of 8 attempts |
| Delivered deliveries kept in the log | 30 days | Fixed |
| Endpoint limits | URL up to 500 characters; 1–40 events | Settings › Webhooks |
MCP server
Section titled “MCP server”| Setting | Default | How to change |
|---|---|---|
| Calls per minute per agent | 120 | Settings › Keys & MCP › Change limits, 1–6,000 |
| Proposal expiry stated to the agent and the approver | 2 hours | Settings › Keys & MCP › Change limits, 1–168 hours |
| Idle MCP session ends after | 30 minutes | Fixed |
Integrations
Section titled “Integrations”| Setting | Default | How to change |
|---|---|---|
| Old key keeps working after Rotate key | 24 hours | Stop the old key now ends it early |
| Call log kept | 7 days | Fixed |
| Needs attention when the key expires within | 7 days | Fixed |
| Needs attention when a managed webhook keeps failing for | 30 minutes | Fixed |
| Needs attention when calls fail | More than 50% of calls in the last hour (at least 4 calls) | Fixed |
| Needs attention when a WordPress site stops reporting for | 24 hours | Fixed |
| WordPress plugin reports to ReputeCast | On connect, every 12 hours and with every post | Fixed |
| Check now timeout for a WordPress site | 10 s | Fixed |
List health
Section titled “List health”| Setting | Default | How to change |
|---|---|---|
| Active tier | Human open or click in the last 30 days | Audience › List health › Sunset policy, 1–3,650 days |
| Cooling tier | 31–90 days since the last engagement | Follows the Active and At risk settings |
| At risk tier | 91–180 days | Audience › List health › Sunset policy › At risk from, 2–3,650 days |
| Sunset tier | More than 180 days without engagement | Audience › List health › Sunset policy › Sunset from, 3–3,650 days |
| Tiers recalculated | Nightly at 03:00 in the workspace time zone | Fixed; the time zone is set in Settings › General |
| Sunset policy in a new workspace | On, with one re-engagement email when a contact enters Sunset | Audience › List health › Sunset policy |
| Broadcasts stop for Sunset contacts | 30 days after entering Sunset without an open | The switch is in the Sunset policy card; the day count (1–365) is set through the API (stopAfterDays) |
| Delete contacts after time in Sunset | Off; 12 months when turned on | The switch is in the Sunset policy card; the month count (1–120) is set through the API (deleteAfterMonths) |
| Undo or restore a deleted list | Undo for 10 s; Restore list from the audit log entry for 30 days | Fixed |
| Needs attention (last 30 days) | Complaints 0.1% or more, bounces 2% or more, or unsubscribes 0.5% or more | Fixed |
Segments
Section titled “Segments”| Setting | Default | How to change |
|---|---|---|
| Live count timeout | 10 s; the last known count is shown after that | Fixed |
| SQL segment statement timeout | 10 s, in a read-only transaction | Fixed |
| SQL segment length | 20,000 characters, one SELECT or WITH … SELECT | Fixed |
| Builder limits | 20 groups, 50 conditions per group | Fixed |
Imports
Section titled “Imports”| Setting | Default | How to change |
|---|---|---|
| Largest CSV or XLSX file | 100 MB and 500,000 rows (XLSX reads the first sheet) | Fixed |
| Source API rate limit (429) | Up to 5 retries, each after the source's Retry-After (2 s when absent, at most 60 s); then the import pauses and resumes by itself after 1 minute | Resume now, or Slow down to 3 req/s on the paused import |
| Source server or network errors | Up to 5 retries, after 1, 2, 4, 8 and 16 s | Fixed |
Scoring
Section titled “Scoring”| Setting | Default | How to change |
|---|---|---|
| Score range | 0–100, from the last 180 days of activity | Fixed |
| Points per rule | −50 to +50 (not 0); up to 50 rules | Audience › Scoring |
| Band thresholds | Warm from 20, Hot from 50 | Audience › Scoring › Bands |
| Decay | On; after 4 weeks without a human open or click, 10% of the score each week | Audience › Scoring › Decay and limits; 1–52 weeks, 1–100% |
| When scores update | New activity within about 15 s; decay and field conditions nightly at 03:00 workspace time | Fixed |
Growth sources
Section titled “Growth sources”| Setting | Default | How to change |
|---|---|---|
| Cohort retention checkpoints | 30 and 90 days after joining | Fixed |
| Source flagged | Bounce or complaint rate above 2 times the workspace rate | Fixed |
| Too few to compare | Fewer than 50 contacts or 100 delivered messages from the source | Fixed |
Forms & pages
Section titled “Forms & pages”| Setting | Default | How to change |
|---|---|---|
| Double opt-in on a new form | On | Form builder |
| Confirmation reminder | One reminder 24 hours after the confirmation email | Fixed |
| Confirmations wait for a System provider | Up to 3 days | Fixed; then the signups are listed as waiting for 30 days with copyable links |
| Suspicious submission held for a Turnstile check | 30 minutes | Form builder › Turnstile |
| Submissions faster than this look automated | 3 s | API minSeconds, 0–60 |
| Submissions per IP address | 5 per minute across the workspace's forms | API rateLimitPerIp, 1–120 |
| Submissions per form | 120 per minute | Fixed |
| Popup timing | Opens after 8 s; stays closed for 14 days after it's dismissed | Form builder › Opens after (0–600 s), Or scrolled (0–100%), Closed for (0–365 days) |
| Pause options in the preference center | 30 or 90 days | Forms & pages › Pages › preference center |
| Download link after a form signup | 7 days | Form builder › Links work for, 1–30 days |
Referrals
Section titled “Referrals”| Setting | Default | How to change |
|---|---|---|
| Hold before a referral counts | 7 days after confirmation | Grow › Referrals › Settings; 0, 3, 7, 14 or 30 days |
| Review a burst of referrals | More than 5 confirmed from one referrer within an hour | Grow › Referrals › Settings, 2–100 |
| Review signups from one IP address | 3 or more within 24 hours | Grow › Referrals › Settings, 2–1,000 |
| Unconfirmed referral stops counting after | 7 days | Fixed |
| Signup IP addresses kept | 90 days, then shortened to their network | Fixed |
| Download reward | PDF, ZIP or image up to 100 MB; links work for 7 days | Fixed |
| Low reward codes alert | Under 20 codes, or under 2 weeks at the current pace | Reward editor › Alert threshold, 0–100,000 |
| Reward webhook retries | 8 attempts over about 6 hours | Fixed; failed rewards can be retried by hand |
| Public leaderboard | Off; top 10 when on | Grow › Referrals › Settings; 5, 10 or 25 rows |
| Referrer hub link works for | 60 days | Fixed; Email me my link sends a new one |
Recommendations
Section titled “Recommendations”| Setting | Default | How to change |
|---|---|---|
| Partner code | Single use, valid 7 days | Fixed |
| Clock difference allowed on signed partner requests | 5 minutes | Fixed |
| Subscribe requests per partner per day | 50, resetting at 00:00 UTC | Grow › Recommendations, 1–100,000 |
| Unanswered subscribe request retried for | 24 hours | Fixed |
| Recommendations on the confirmation page | Up to 3 | Fixed |
| Partner request log kept | 90 days | Fixed |
Authentication
Section titled “Authentication”| Setting | Default | How to change |
|---|---|---|
| Session lifetime | 14 days | Instance admin › Authentication; 1 day, 7 days, 14 days or 30 days (API 1–2,160 hours); applies to new sessions |
| Idle timeout | 12 hours | Instance admin › Authentication; 1, 4, 12 or 24 hours (API 5–4,320 minutes), never longer than the session lifetime |
| Lockout after failed sign-ins | 10 failed attempts for one email lock it for 15 minutes | Instance admin › Authentication; 3–100 attempts, 5 minutes, 15 minutes or 1 hour (API 1–1,440 minutes) |
| Two-factor authentication required for | Members with a sensitive permission | Instance admin › Authentication; everyone, members with a sensitive permission, or off |
| Grace period to set up two-factor authentication | 7 days | Instance admin › Authentication; none, 1, 3, 7 or 14 days (API 0–90) |
| Minimum password length | 12 characters | Instance admin › Authentication, 8–128; passwords can be up to 256 characters |
| Password re-use | The last 5 passwords are blocked | Instance admin › Authentication; block the last 5, block the last 10, or allow re-use |
| Check new passwords against known breaches | Off | Instance admin › Authentication |
| Email domains allowed for new SSO accounts | Up to 50 (none means any domain the identity provider allows) | Instance admin › Authentication |
| Password reset link | Works once, for 15 minutes | Fixed |
Time to set up two-factor authentication again after reputecast user reset-2fa | 72 hours | Fixed; a reset in Instance admin › Users uses the policy's grace period |
| Recovery codes | 10, each works once | Account & security › regenerate (replaces all) |
| Email change verification link | 24 hours | Fixed |
| Time to finish the second sign-in step | 10 minutes; 5 wrong codes restart the sign-in | Fixed |
| Setting | Default | How to change |
|---|---|---|
| Invitation link expiry | 7 days | Settings › Team › Invite; 24 hours, 7 days or 30 days |
| People per invitation | Up to 50; personal message up to 1,000 characters | Fixed |
| Deleted workspace can be restored for | 7 days, by an instance admin | Fixed |
| Owners per workspace | At least 1; the last Owner can't be removed, demoted or deactivated | Fixed |
Audit log
Section titled “Audit log”| Setting | Default | How to change |
|---|---|---|
| Workspace audit entries kept | 365 days | Settings › Audit log › Webhook stream › Keep entries for; 90 days to 3 years (API 30–3,650 days) |
| Instance audit entries kept | 365 days | Instance admin › Audit log › Retention; 90 days to 10 years (API 30–3,650 days) |
| Retention cleanup | Every hour | Fixed |
| Audit stream batches | Up to 500 entries per request, checked every 30 s | Fixed |
Instance admin
Section titled “Instance admin”| Setting | Default | How to change |
|---|---|---|
| A public URL change reaches every process | Within 30 s | Instance admin › Instance & updates › Public URL |
| Release check on GitHub | Daily, on by default; sends no usage data | Instance admin › Instance & updates; config updates.check turns it off for the instance |
| Instance logo | SVG up to 100 KB, or PNG up to 512 KB and 16–1,024 px per side | Fixed |
| Instance name | 1–80 characters | Instance admin › Instance & updates |
Agency
Section titled “Agency”| Setting | Default | How to change |
|---|---|---|
| Client needs attention | Health under 80, an incident in the last 7 days, or an approval waiting longer than 24 hours | Fixed |
| Agencies per instance | 1, off by default | Instance admin › Instance & updates › Agency |
| Deleted client can be restored for | 7 days | Fixed |
HTTP server
Section titled “HTTP server”| Setting | Default | How to change |
|---|---|---|
| Request timeouts | Headers 10 s, read 30 s, write 60 s, idle connections 120 s | Config http.read_timeout and http.write_timeout; the others are fixed |
| Largest request headers | 1 MiB | Fixed |
| Graceful shutdown | 20 s | Config http.shutdown_timeout |
/readyz database check | 2 s, then 503 | Fixed |
| Live monitor event stream | Heartbeat every 15 s; retry 3,000 ms | Fixed; don't buffer this stream in your proxy |
| Setting | Default | How to change |
|---|---|---|
| Stripe webhook events registered | 14 | Earn › Settings › Payments › Register again re-creates the webhook |
| Check for Stripe events the webhook missed | Every hour | Fixed |
| Raw Stripe events kept | 90 days | Fixed |
| Stripe webhook silent warning | 24 hours without an event, with 50 or more active subscriptions | Fixed |
| Attribution window | 7 days | Earn › Settings › Attribution, 1–30 days (needs payments:manage) |
| Free trial per tier | None | Earn › Plans & offers › tier; 7, 14 or 30 days |
| Access while a payment fails | Kept while Stripe retries | Earn › Settings › Access; keep access or end it at once |
| Retention offer per paid member | Once every 12 months | Fixed |
| Offer duration | Once | Offer editor; once, 1–36 months, or forever |
| Referral reward code valid for | 60 days | Referral reward offer, 1–365 days |
| Paying again counts as reactivated within | 90 days after access ended | Fixed |
Conversions API occurred_at | Up to 30 days in the past, never in the future | Fixed |
| Paid member import file | Up to 25 MB and 100,000 rows | Fixed |
Gift subscriptions
Section titled “Gift subscriptions”| Setting | Default | How to change |
|---|---|---|
| Gift redeem link works for | 12 months after delivery | Earn › Gifts › Gift links work for; 3, 6 or 12 months |
| Gift message | Up to 300 characters | Fixed |
| Scheduled delivery | Up to 1 year ahead | Fixed |
| Gift emails | Reminder 7 days after delivery if not redeemed; ending notice 7 days before the gift ends | Earn › Settings › Member emails |
| Gift length | 1–36 months per option | Earn › Gifts › New option |
Sponsorships
Section titled “Sponsorships”| Setting | Default | How to change |
|---|---|---|
| Creative text | Up to 280 characters; headline 120, button 40 | Fixed |
| Creative due before the issue | 4 days | Earn › Sponsors › slot, 0–30 days |
| Sponsor report final | 72 hours after the send | Fixed |
| Payment terms | 14 days after the issue | Earn › Sponsors › sponsor, 0–120 days |
| Shared sponsor report link expires | 90 days | Share dialog; 30 days, 90 days, a date or never |
Digital products
Section titled “Digital products”| Setting | Default | How to change |
|---|---|---|
| File size | Up to 500 MB per file and 2 GB per product | Fixed |
| Minimum price | $1, also the lowest pay-what-you-want minimum | Fixed |
| Download link works for | 7 days | Earn › Products › product › Delivery, 1–30 days |
| Downloads per link | 5 | Earn › Products › product › Delivery, 1–20 |
| New links a buyer can request | 3 per order in any 24 hours | Fixed; your team can send more from the order |
Website
Section titled “Website”| Setting | Default | How to change |
|---|---|---|
| Member sign-in link and 6-digit code work for | 30 minutes, once | Website › Access; 10, 15, 30 or 60 minutes |
| Sign-in links per email address | 5 per hour | Fixed |
| Members stay signed in for | 90 days | Website › Access, 7–365 days |
| Post limits | Title and excerpt up to 200 characters; up to 5 tags | Fixed |
| Home page and navigation | Up to 3 featured posts and 6 header links; Latest posts shows 6 | Website › Home & navigation (Latest posts 0–24) |
| Meter | Off; when on, 2 posts a month for visitors and 1 for free members | Website › Access › Meter, 1–20 posts a month |
Shopify and WooCommerce
Section titled “Shopify and WooCommerce”| Setting | Default | How to change |
|---|---|---|
| Orders imported when you connect a store | The last 12 months | Connect dialog; 3, 6 or 12 months |
| Order attribution window | 5 days | Settings › Integrations › store › Attribution, 1–30 days |
| Abandoned checkout trigger waits | 1 hour; skips contacts who got an abandoned-cart email in the last 7 days | Automations › Abandoned checkout trigger, 1–24 hours |
| Polling while a store webhook is missing | Every 15 minutes | Fixed |
| Reconciliation with the store | Nightly at 03:00 in the workspace time zone | Sync now on the store page |
| Store events and activity kept | 30 days | Fixed |
| Setting | Default | How to change |
|---|---|---|
| Quiet hours (recipient's local time) | Sends only 09:00–20:00 | Sending providers › SMS › Routing & rules; can't go beyond 08:00–21:00 |
| Characters per segment | GSM-7: 160, or 153 per part of a longer text. Unicode (UCS-2): 70, or 67 per part | Fixed |
| Alphanumeric sender ID | Up to 11 characters; not supported in the US and Canada | Fixed |
| Short links in texts work for | 12 months | Fixed |
| Monthly budget | None; when set, an alert at 80% and sending holds at 100% | Sending providers › SMS › Routing & rules › Budget and guards (alert 1–100%) |
| Auto-pause thresholds (counted after 50 texts) | Failed above 5%, filtered by carriers above 2%, opt-outs above 3% | Sending providers › SMS › Routing & rules, 0.1–100%; per campaign in Review & send |
| Sends that need the recipient count typed to confirm | More than 1,000 recipients or a cost above $100 | Fixed |
| Text content kept | 30 days | Sending providers › SMS › Routing & rules › Retention; don't keep, 7, 30, 60 or 90 days |
| Brand prefix and opt-out text | Prefix up to 20 characters; opt-out text up to 60, "Reply STOP to opt out" by default | Sending providers › SMS › Routing & rules › Message rules |
Web push
Section titled “Web push”| Setting | Default | How to change |
|---|---|---|
| Recommended lengths | Title 50 characters, message 120 (longer gives a warning) | Fixed |
| Buttons per notification | Up to 2 (shown by Chrome and Edge) | Fixed |
| Notification expiry | 4 hours | Push composer › Expires after; 1 hour, 4 hours, 12 hours, 1 day or 4 weeks |
| Notifications per subscriber per day | 2 | Sending providers › Push › Setup, 1–24 |
| Prompt asks again after Not now | 14 days | Push prompt designer › Frequency, 1–365 days |
| Prompt appears | After 30 s on a page or after scrolling 50% of a post | Push prompt designer › When |
| Quiet hours | On, using the SMS window (09:00–20:00 by default) | Sending providers › Push › Setup |
| Setting | Default | How to change |
|---|---|---|
| Templates synced from Meta | Every hour | Sync now for an immediate sync |
| Customer service window for free-text messages | 24 hours after the contact's last message | Fixed (Meta's rule) |
| Raw webhooks and received messages kept | 90 days | Fixed |
AI assistant
Section titled “AI assistant”| Setting | Default | How to change |
|---|---|---|
| Monthly cap | $25 | Settings › Integrations › AI assistant; dollars ($1–$100,000), tokens (at least 10,000) or no cap |
| Cap notices | At 80% and at 100%; at 100% AI features pause until the 1st | Fixed |
| AI activity log kept | 90 days, without content | Fixed |
| Request timeouts | Rewrites, alt text and fixes 45 s; subject ideas, segment drafts and summaries 60 s; translation 120 s | Fixed |
Related
Section titled “Related”- Configure ReputeCast explains the configuration layers.
- Workspace sending defaults shows where the auto-pause thresholds live.
- Instance admin covers the instance-wide sign-in limits.