Limits and safety
What each access level allows, the Free plan limits, rate limits, and the things Outbind's brain never does.
What the brain never does
At every access level, over MCP and the Brain API:
- It never sends an email, LinkedIn message or any other message. The writing tools return text; the person sends it.
- It never finds leads, enriches contacts or spends credits on data.
- It never creates, starts or changes a Flow.
plan_flowonly writes a plan. - Billing, keys, sign-in and security, team and roles stay in the app.
So a prospect's reply or a document that tries to instruct the assistant can't make anything go out.
Access levels
| Level | Can use |
|---|---|
| Read only | get_brain, recall_prospect, sort_reply, list_documents |
| Can draft and edit | Every brain tool. create_icp, team lessons and documents also need the person to be an owner or admin. |
The person picks the level when they press Allow, or when they make a key. A Read only member gets the reading tools whatever their key says.
Plan limits
The Free plan includes MCP and every brain tool, with:
- up to 50 prospects in the workspace,
- 100 email checks a day with
verify_emails, - one seat.
The writing, scoring and research tools count against the workspace's monthly AI allowance, as they do in the app. When a limit is reached the tool says so in plain words. Need more? Write to hello@outbind.ai.
Rate limits
Per key or connected app: 60 tool calls a minute, 60 changes (anything that isn't a read) an hour and 300 requests a minute in all. Request bodies up to 320 KB. Answers longer than 60,000 characters are cut. Past a limit the server answers 429: wait and try again.
Privacy and audit
- Every tool call is written to the workspace's audit log with what it did and whether it worked, never its input or output. The person sees the latest ones in Settings, MCP.
- Keys and tokens are stored only as hashes. Access tokens last an hour; refresh tokens 30 days and rotate on every use.
- Disconnect in Settings, MCP ends an app's access at once.
- How Outbind handles personal data: Privacy and Data Processing Agreement.