# Limits

Every number that limits what you can publish and how often, by plan. Past a limit, the API answers `429 limit` (or `413 too_large` for size) with an `agent_message` that says what to do.

## Say this to your AI

```prompt
Show me my Page Lemon usage and limits
```

Your AI calls `get_account`, which returns your plan, usage and limits. Over REST, `GET /v1/me` returns your plan and site count.

> **Plans:** limits follow the plan of the account that owns the site. Enterprise limits are set per contract.

## Sites and storage

| | No account | Free | Prompter | Builder | Team | Company |
|---|---|---|---|---|---|---|
| Live sites | – | 3 | 10 | 50 | 100 | 250 |
| Archived sites | – | 1 | 5 | unlimited | unlimited | unlimited |
| Files per site | 100 | 500 | 1,000 | 2,000 | 3,000 | 5,000 |
| Largest file | 1 MB | 5 MB | 50 MB | 50 MB | 50 MB | 50 MB |
| Site size | 1 MB | 5 MB | all of the plan's storage | all of the plan's storage | all of the plan's storage | all of the plan's storage |
| Storage (all versions, all sites) | – | 100 MB | 5 GB | 25 GB | 50 GB | 150 GB |
| Version history | 72 hours | 7 days | 90 days | 1 year | 1 year | 2 years |
| Shortest chosen name (letters and digits) | – | 8 | 5 | 5 | 5 | 5 |
| Custom domains | – | none | 3 | 5 | 10 | 25 |

- **Live sites** include sites deleted in the last 30 days.
- **Storage** counts each file once, however many versions use it.
- **One request** carries at most 90 MB (40 MB through MCP). Send a bigger site as a first deploy, then patch deploys.
- **Version history:** every version from the last 30 days is kept; older ones are thinned to one a week, back as far as the plan allows. The live version is never removed.

## People

| | Free | Prompter | Builder | Team | Company |
|---|---|---|---|---|---|
| People who can edit a site, owner included | 1 | 3 | 5 | 10 | 25 |
| Viewers per site | 3 | 25 | 50 | 50 | 100 |
| Members-only visitors, all sites | none | 25 | 100 | 250 | 500 |
| Invite emails a day | 10 | 20 | 30 | 50 | 100 |

## Forms, bookings and analytics

| | Free | Prompter | Builder | Team | Company |
|---|---|---|---|---|---|
| Form messages a month | none | 1,000 | 10,000 | 25,000 | 50,000 |
| Email alerts a day: one for each new message, booking or order (after that, one summary email the next morning) | none | 20 | 50 | 100 | 200 |
| Inboxes that get alerts, yours included (they share the daily alerts) | just you | just you | just you | 5 | 15 |
| Bookings a month | none | none | none | 2,000 | 5,000 |
| Forms per site | none | 20 | 20 | 20 | 20 |
| Booking systems per site (staff and rooms all go in one) | none | none | none | 1 | 1 |
| Analytics history | 7 days, totals only | 90 days | 1 year | 1 year | 2 years |

## Rate limits

| | Free | Prompter | Builder | Team | Company |
|---|---|---|---|---|---|
| Deploys an hour, per account | 30 | 60 | 120 | 200 | 300 |
| Deploys an hour, per API token | 20 | 40 | 60 | 100 | 150 |
| REST and MCP requests an hour, per API token or connection | 600 | 1,500 | 3,000 | 5,000 | 8,000 |

- **Without an account,** each network gets a small number of deploys an hour and a day. Signing in removes that limit.
- **Renames:** 3 per site and per account in 24 hours.
- **Custom domains:** 10 adds per account in 24 hours. Domain searches: 20 an hour.
- **Upload links** last 1 hour and take up to 50 files per upload.
- **MCP batches** carry at most 20 messages.

## What's skipped or refused

- **Skipped** (listed in the response): `.git/`, `node_modules/`, `.env*`, `*.map`, `*.pem`, `*.key`, dotfiles except `.well-known/`, `.DS_Store`, `Thumbs.db`.
- **Refused:** an upload with a recognised secret key or private key (`422 blocked_secret`; nothing is published), symlinks, absolute paths, `..`, and paths that differ only in case.
- **Required:** `index.html` at the top level.
- **Web files only** without an account and on Free. **On every plan,** programs, installers and archives that contain them are refused. Email support@pagelemon.com if you need to share another kind of file.
- **Sign-in and payment pages** that send passwords, card or wallet details to another website, or imitate another brand, are refused (`422 blocked_content`) to protect visitors.