# Limits and safety

> What each access level allows, the Free plan limits, rate limits, and the things Outbind's brain never does.

## What the brain never does

At every access level, over MCP and the Brain API:

- It never sends an email, LinkedIn message or any other message. The writing tools return text; the person sends it.
- It never finds leads, enriches contacts or spends credits on data.
- It never creates, starts or changes a Flow. `plan_flow` only writes a plan.
- Billing, keys, sign-in and security, team and roles stay in the app.

So a prospect's reply or a document that tries to instruct the assistant can't make anything go out.

## Access levels

| Level | Can use |
| --- | --- |
| Read only | `get_brain`, `recall_prospect`, `sort_reply`, `list_documents` |
| Can draft and edit | Every brain tool. `create_icp`, team lessons and documents also need the person to be an owner or admin. |

The person picks the level when they press **Allow**, or when they make a key. A Read only member gets the reading tools whatever their key says.

## Plan limits

The Free plan includes MCP and every brain tool, with:

- up to 50 prospects in the workspace,
- 100 email checks a day with `verify_emails`,
- one seat.

The writing, scoring and research tools count against the workspace's monthly AI allowance, as they do in the app. When a limit is reached the tool says so in plain words. Need more? Write to hello@outbind.ai.

## Rate limits

Per key or connected app: 60 tool calls a minute, 60 changes (anything that isn't a read) an hour and 300 requests a minute in all. Request bodies up to 320 KB. Answers longer than 60,000 characters are cut. Past a limit the server answers `429`: wait and try again.

## Privacy and audit

- Every tool call is written to the workspace's audit log with what it did and whether it worked, never its input or output. The person sees the latest ones in [Settings, MCP](https://app.outbind.ai/settings/mcp).
- Keys and tokens are stored only as hashes. Access tokens last an hour; refresh tokens 30 days and rotate on every use.
- **Disconnect** in Settings, MCP ends an app's access at once.
- How Outbind handles personal data: [Privacy](https://outbind.ai/privacy) and [Data Processing Agreement](https://outbind.ai/dpa).