Limits
Carte is free during preview. These limits exist to keep it usable for everyone; if you need more, email hello@carte.sh.
Rate limits
Exceeding one returns 429 rate_limited with a Retry-After header in seconds. Limits are token buckets, so short bursts are fine.
| Limit | Value |
|---|---|
| Web drop, per user | 60 per hour |
| Web drop, per handle | 300 per hour |
| Web drop, per IP | 30 per hour |
| API, per key | 600 requests per minute |
| Uploads, per handle | 10 GB per day |
| New accounts, first 24 h | 10 sends and 500 MB |
Size limits
Over-size payloads return 413 with json_too_large or file_too_large. Use presigned uploads for anything over 25 MB.
| Limit | Value |
|---|---|
| JSON body | 1 MB |
| Inline multipart file | 25 MB each |
| Presigned upload | 5 GB each |
| Files per message | 100 |
| Synchronous hashing | Files up to 100 MB; larger files are hashed after delivery |
Soft limits
Soft limits are not enforced by the API. Usage is visible under GET /v1/me and in the dashboard; we will reach out before acting on them.
| Limit | Value |
|---|---|
| Messages (sends and replies) | 1,000 per month per business |
| Storage | 20 GB per business |
Retention
Messages and files are kept forever. The ledger is append-only: there is no deletion path, in the API or in the dashboard. Do not send data you may later need to remove.
Abuse
Report abuse to abuse@carte.sh. Takedowns are handled manually by the operator. Recipients can block senders by user or by email domain at any time.