Whose limits apply
Limits belong to the workspace owner’s account, not to the person or key making the request.- One account, every workspace. Computers in all the workspaces you own count together. A computer a member creates in your workspace counts against your plan, not theirs.
- The account pool. Each paid plan includes vCPU and RAM that all of the account’s plan computers share. A computer holds its vCPU and RAM from the pool until you delete it, whether it is running, stopped or asleep.
- See where you stand. The Usage page shows what you use against each limit. From code, Get capacity returns your computer, RAM and vCPU limits and what you use of each.
- Two exceptions. Publishing, building and test-running templates follow your own plan, whoever owns the workspace. The endpoint limits in Endpoint limits count what each table names, and an account there is your own, not the workspace owner’s. The Plan rate limits follow the rule above: the workspace owner’s account.
Limits by plan
- Computers past 50 run by the hour from your credit, up to 999 in all, as described in Computers per account.
- Free has no plan, so every computer it has runs by the hour. Its $5 of signup credit runs one Medium computer (2 vCPU, 8 GB RAM, 40 GB disk). Credit you buy lifts it to the 50 every plan has, all Medium, as described in Computers by the hour.
- Enterprise pools, disk and people are set per account in your contract, and so is its computer count when the contract names one. Contact us for any of them.
- Starter’s pool holds one Medium. A Large (4 vCPU, 16 GB) on an empty Starter account is refused with
This size needs 16 GB of memory. Your plan allows 8 GB per computer.(codeRAM_ADDON).cpu: 4withram: 4is refused withYou have 2 vCPU free. This size needs 4.(codeVCPU_ADDON). - Some older accounts carry an extra vCPU allowance from before vCPU limits began. The limit on Usage and in Get capacity includes it.
- Templates. Any paid plan can launch them. Publishing, building and test-running templates needs Scale or Enterprise on your own plan, whoever owns the workspace, as described in Templates.
Plans no longer sold
Older plans keep the numbers they were sold with, and every one has the computer limit in Computers per account. If your plan’s own pool, before add-ons, differs from the table above, your plan is one of these. Some of them share a name with a current plan. Theplan field in Get capacity tells them apart: the current plans are hacker_v2 (Starter), startup_v2 (Growth) and scale_v2 (Scale), and the first column below gives each older plan’s value.
A new computer on one of these plans starts with 20 GB of disk, or the plan’s disk per computer when that is less. Growth (200 GB), Scale (200 GB) and Max can also publish templates.
How far add-ons go
Add-ons raise your pools and the disk one computer can have, at the prices in Computer prices. They need a paid plan. On your own, an account can add up to:
One purchase through Add capacity buys 1 to 500 computers’ worth. Past the amounts above, it answers
403 with code capacity_cap: That would go past this account's limit of ... Ask us to raise it. Add-ons never take one computer past the per-computer caps in How big one computer can be.
Computers per account
An account has one computer limit: every computer it has, plan and hourly together, in every workspace it owns, running or stopped. Nothing limits how many of them run at once.
The first number is the account’s baseline. Orgo gives its own number to a negotiated plan, an Enterprise contract that names one, and an account set to pay for every computer from credit. Computer slots are no longer sold. Slots you bought before stay on your subscription and add to the 50 until you remove them. Buying one answers
410 with code slots_retired.
Past 50, credit raises the limit
Past the baseline, a new computer is made by the hour from your credit, as long as your credit covers at least an hour of every hourly computer you would then have:- Your hourly computers at their running rate, or their stopped rate while stopped. One that prepaid its end needs nothing more.
- The new computer’s first hour, or its whole prepaid run when it has an end, as described in Set when a computer ends.
- A plain create goes by the hour on its own. At the baseline,
POST /api/computerswith nobilling_modelaunches the computer by the hour when your credit covers it. Send"billing_mode": "hourly"to ask for that yourself, or"billing_mode": "plan"to be refused instead. The launch needs what any launch by the hour needs, described in Computers by the hour: Linux, or Windows where it is offered by the hour, blank or from a starter template, with nogpu, image or snapshot. - No plan computer is made past the baseline. A computer that can’t run by the hour is refused there: a clone, a fork, a restore as a new computer, a move onto the plan, a GPU, macOS, iPhone or Android computer, an image, a snapshot, or a template that is not a starter. Switching an hourly computer onto the plan is refused too, and it stays by the hour.
- Only the workspace owner raises it. A member past the baseline is told to ask the owner, and the owner’s credit is never read for them.
The most computers an account can have
The raise by credit never takes an account past 999 computers. An account Orgo gave its own number above 999 can have up to that number, at most 9999, and credit does not raise it further. At that point a create answers403 with code VM_SLOT_ADDON and upgradeTier: "enterprise": 999 computers is the most an account can have. Delete one, or contact us for more. An account already past it keeps its computers. Only new ones are refused.
What counts toward the limit
- Every computer in every workspace you own, plan or hourly, whatever its state: running, stopped, suspended or asleep in storage.
- A device (an iPhone, an Android phone, or a Mac you connect) counts as 1 computer and uses none of the pools.
- A macOS computer counts as 1 computer and takes 10 GB of the RAM pool. Its vCPU comes from its Mac host, not from your pool.
- Computers in a workspace a client pays for under Invoicing. Instead, that workspace can’t cost more a month than the client pays: a create or resize past it answers
403with codeCLIENT_PRICE_EXCEEDED. - Bops computers and template test runs.
What a refusal at the limit says
At the limit, a create answers403 with code VM_SLOT_ADDON. A negotiated plan at its computer count answers code PLAN_LIMIT instead. Both carry these fields beside error, code and upgradeTier: "enterprise":
The one free computer on signup credit answers
403 with code HOURLY_LIMIT, and its body carries only error and code.
The error says what to do:
See where you stand
GET /api/billing/quotareturnscomputers(every computer, plan and hourly),baseline(nullwhen the account has no limit),ceiling,can_raiseandraise_available.can_raiseistruewhen your credit covers going past the baseline now, for a Medium Linux computer by the hour, andnullwhen the credit could not be read.raise_availableisfalsewhen credit can’t raise your limit at all.- Get capacity returns the same under
computers, astotal,baseline,ceiling,can_raiseandraise_available, besidelimitandin_use, which count your plan computers alone.
When credit runs out
An hourly computer is billed by the second from your credit. When the credit can’t pay for the next minute, the computer stops. Adding credit does not restart it: start it again, which needs credit (402, code INSUFFICIENT_COMPUTE_CREDIT: Add credit to start this computer.). A launch without enough credit answers 402 with code insufficient_credit. Your plan’s monthly AI credit does not pay for hourly computers.
An end you give a computer is 1 to 720 hours, and the computer is deleted when it is up, as described in Set when a computer ends.
Computers by the hour
- On a paid plan, a computer runs by the hour when your plan has no room for its vCPU, RAM or disk, and every computer past the baseline does. A launch by the hour that fits the plan answers
409with codeFITS_PLAN. How a computer is paid for explains when each applies. - Free runs Medium Linux computers. Any other size answers
403with codeFREE_HOURLY_MEDIUM_ONLY:Free accounts can launch a Medium computer. Choose a plan for other sizes. - Free on signup credit alone runs one computer, and free computers on signup credit share running places across all free accounts. When they are full, a launch or a Start answers
503with codeFREE_HOURLY_BUSY:Free computers are busy right now. Try again in a few minutes.Buying credit or choosing a plan lifts both. - Only the workspace owner launches by the hour. On a paid plan, that means signed in, or with a key that has full access or Billing write.
Workspaces, people and keys
Workspaces
You can own 9999 workspaces on every plan, Enterprise included. At 9999, a new workspace answers403 with code WORKSPACE_LIMIT: An account can have up to 9999 workspaces. Delete one, or contact us for more. A workspace name is 1 to 80 characters and unique among your workspaces, ignoring case. A name you already use answers 400 with code WORKSPACE_NAME_TAKEN.
People per workspace
Each Orgo workspace holds the number of people in Limits by plan, besides its owner, counted against the owner’s plan. A Bops workspace follows its owner’s Bops plan instead: 0 on Free, 2 on Pro, 10 on Max.- Members, share-link guests and invites that haven’t expired all count.
- An invite expires after 7 days. A share link lasts 30 minutes, and each person who joins with it needs a free seat at that moment.
- Only the owner can invite people or make a share link.
- Accounts that pay Orgo for dedicated computers or hardware can have 25 people per workspace, or their plan’s number if that is higher.
- People already in a workspace keep their access if the plan goes down. A lower plan only stops new people joining.
403 with code SEAT_LIMIT, carrying limit, used and upgradeTier. On Free, it answers 403 with code UPGRADE_REQUIRED. More is in Workspaces, members and clients.
Make someone else the owner
The new owner’s account must have room for the workspace’s computers, RAM and vCPU on top of their own. Their computers count plan and hourly together, against their baseline. Otherwise the change answers409 with code NEW_OWNER_CAPACITY, for example Their account includes 50 computers, and this would bring them to 54. A workspace that has hourly computers can’t change owner (409, code HOURLY_COMPUTERS).
API keys
- No limit on how many keys an account has.
- 30 key creates or changes an hour, described in Rate limits.
- An expiry is optional: 1 to 365 days. See Key expiry and rotation.
Secrets
- No limit on how many secrets you store.
- A name is up to 64 letters, digits,
_and-. A value is up to 8,192 characters. - One Apply secrets call takes 1 to 50 names and 1 to 100 computers. Values too large to send in one call answer
413with codetoo_large. Apply fewer at a time.
Client accounts
Each client account is a workspace you own, kept out of your workspace list. It can have its ownmax_computers (0 to 10,000) and monthly_ai_cap_usd ($0 to $1,000,000), or no limit, as described in Add a client.
- A client at its computer limit answers
403with codeACCOUNT_COMPUTER_LIMIT:This account is limited to N computers. Raise max_computers to add another. - A client at its monthly AI limit answers
402with codeaccount_ai_limit.
How big one computer can be
The sizes and the values the API accepts are in Instance types.- On your own, up to XL: 6 vCPU and 32 GB RAM. Past that (2XL: 8 vCPU, 64 GB) is set up on request. A larger create answers
403with codeCONTACT_US_FOR_SIZE:Computers larger than 6 vCPU and 32 GB are set up on request. Contact us. - No computer goes above 8 vCPU, 64 GB RAM or 300 GB of disk, on any plan. A request for 16 vCPU answers
403with codePER_COMPUTER_CPU_CAP. - Each computer also comes out of your pool. One computer can take as much of it as is free. A computer with more RAM than your whole RAM pool plus the RAM you bought answers
403with codeRAM_ADDON:This size needs N GB of memory. Your plan allows M GB per computer.A computer that fits the pool’s size but not what is left free answers403with codeRAM_ADDON(You have N GB of memory free. This size needs M GB.) orVCPU_ADDON(You have N vCPU free. This size needs M.). On a paid plan, the workspace owner can launch either one by the hour instead.
Disk
- A new computer on a current paid plan gets 40 GB, unless you choose a size or its template sets one.
- The most one computer can have before add-ons is in Limits by plan. Storage add-ons raise it, up to 300 GB per computer. Your storage blocks are shared by all your computers.
- Above the ceiling, a create answers
400with codedisk_exceeds_quotaandmax_disk_gb. A resize answers400with the same message andmax_disk_gb. - Disk only grows. A resize below the current size answers
400:Storage can only be increased (current: N GB).
Resize
Resize changes a computer within the same limits, with these on top:- Only a running computer resizes, and one resize runs at a time.
- RAM resizes up to 32 GB on a running computer. 64 GB is reached only at create.
- An hourly computer keeps its size. Launch another size instead.
- Macs, iPhones, Android phones and other devices can’t be resized.
Operating systems
- Windows is included on Scale. On Starter and Growth, each Windows computer needs a Windows licence: hold 3 licences, run 3 Windows computers. Without one, a create answers
403with codeWINDOWS_REQUIRES_SCALE. - macOS computers have 10 GB of RAM, no more and no less (
400, codeMACOS_RAM_FIXED). That is more than Starter’s 8 GB pool, so a Mac on Starter needs RAM added. A workspace with no Mac host serving it answers422with codeOS_UNAVAILABLE.
Bandwidth
A Free account’s hourly computer runs at up to 100 Mbps. On a paid plan, Resize sets a computer’s bandwidth limit up to 1,000 Mbps.Agent runs
These apply to Chat completions (POST /api/v1/chat/completions). How many runs an account can start a minute, and have at once, is in Plan rate limits.
Step limit
A step is one model call and the computer actions it makes. A request runs at most 250 steps. Sendmax_steps to allow up to 500.
- A value above 500 runs with 500. A value below 250 runs with 250:
max_stepscan raise the limit but never lower it. - A value that is not a number is ignored. No value is rejected.
- Each request is a new run, counted from 0. Chat in the Orgo app runs up to 250 steps, or 50 on GPT-6 Astra and GPT-6 Sol.
When a run reaches its step limit
The run stops and answers200, not an error. A response that is not streamed has:
finish_reasonset to"length"instead of"stop".- Message content of
Stopped after N steps. Send a message to keep going. orgo.steps, the number of steps, andorgo.thread_id, the thread the turn was saved to. The thread ID is also sent as theX-Thread-Idheader.
finish_reason: "length". Its thread ID comes only in the X-Thread-Id header.
Continue a run
- Add the run’s reply to your transcript as an assistant message.
- Add a new user message, such as
Keep going. - Send the whole transcript again, with the same
thread_idto keep the saved thread complete.
When a run runs out of credit
- Hold. Each request holds 10 cents of AI credit before it runs. Without it, the request answers
402with codecredits_exhausted. - Budget stop. A run stops once its cost comes within 25 cents of the balance it started with. It answers
200withfinish_reason"stop", and the last message says the credit ran out. Add credit and send a follow-up. - Member limit. A request that spends someone else’s credit, from a member of your workspace or a share-link guest, may use at most $5. There is no monthly limit per member. A client account’s monthly AI limit applies on top.
- Your own model key pays instead of your credit. Your provider’s own limits apply, and a request over them answers
429with codeown_key_rate_limited. See Bring your own model key.
Inside a run
- A request body is at most 150 MB. A larger one answers
413with coderequest_too_large. - The agent’s own shell commands stop after 120 seconds each.
Computer actions and timeouts
Computer actions made with an API key, a computer’s own key or an MCP sign-in count as control calls, described in Plan rate limits. Each waits a set time for the computer to answer:
A tool call from an AI app connected to Orgo’s hosted MCP with sign-in stops after 120 seconds, so a longer command fails there. Run it through the API instead.
Rate limits
API rate limits depend on the plan of the account a request counts against, described in Plan rate limits. Some endpoints also have limits of their own, the same on every plan, described in Endpoint limits.Plan rate limits
What each row counts:
- New computers: every way a computer is made. That is Create computer, creating one by workspace name, Clone, Fork, a restore as a new computer, a template preview, Build and launch, the computer made during onboarding, and a free trial computer. On create, clone and fork the count comes just before the computer is made, so a request refused for its body, its plan or the computer limit spends none.
- Starts, stops and other changes: Start, Stop, Restart, Resume, Suspend, Delete, Resize, a restore in place, and the other changes that boot, stop or rebuild a computer.
- Control calls: screenshot, click, drag, mouse move, scroll, type, key, bash, exec and wait, calls through the Desktop API proxy, and terminal input over the WebSocket. Only API keys, a computer’s own key or identity token, and MCP sign-ins are counted.
- Agent runs: Chat completions. A run holds its place at once until it finishes.
- New workspaces: Create workspace.
- Other API calls: every other request from an API key, a computer’s own key or an MCP sign-in.
- Per account, never per key. A request on a computer or a workspace counts against the account that owns it, the workspace owner. Any other request counts against your own account. Extra keys share their account’s numbers.
- Signed in use of the dashboard is never counted for control calls or other API calls. New computers, starts and stops, and new workspaces count from the dashboard too. Agent runs count only requests to Chat completions. The dashboard’s own agent chat is not counted as an agent run.
- Plans no longer sold count as the nearest current plan: Starter (20 GB) and Developer as Starter, Team and Growth (200 GB) as Growth, Scale (200 GB) and Max as Scale. A paid Bops plan counts as Starter at least. An account Orgo has set to pay for every computer from credit starts from the Scale numbers. Orgo can also set an account’s own numbers.
- Windows are fixed: a minute, a clock hour, and a day that ends at 00:00 UTC.
- Control calls and other API calls are counted on each Orgo server separately, so requests spread over several servers can get past the number. Plan for the number listed.
429 with code rate_limited. limit names the limit that was reached, and retry_after is how many seconds to wait:
- Headers. The
429carriesRetry-After, andRateLimit-Limit,RateLimit-RemainingandRateLimit-Resetfor the limit with the fewest requests left. Answers that are not refused carry theRateLimitheaders too. - Agent runs at once say
1 agent run at once is the most on your plan. Try again when one finishes. - Your account’s own numbers say
for this accountin place ofon your plan. - Chat completions answers in its own error shape:
{ "error": { "type": "rate_limit_error", "message": "…", "code": "rate_limited", "limit": "chat_runs_per_minute", "retry_after": 12 } }.
Retry-After seconds, then retry.
Endpoint limits
The endpoints in the tables below have limits of their own, the same on every plan. Most answer429 with code rate_limited and a Retry-After header, and many also carry retry_after in the body:
Keys, capacity and billing
Sign-in
An email code works for 10 minutes, and 5 wrong guesses end it. A device sign-in code expires after 10 minutes. An MCP sign-in’s access token lasts 1 hour, and its grant 30 days.
Support and contact
Each account gets 150,000 free support tokens a day. After that, answers come out of your credits, as described in Ask support.
Agents and models
One gateway request runs for at most 40 minutes, with a body of at most 32 MB.
Templates
Screens
A VNC WebSocket message is at most 16 MB. A larger one closes the connection.One operation at a time
Some changes run one at a time. A request that arrives while one is under way is refused and changes nothing, unless it repeats the same Start or Stop.Request sizes
A large upload’s signed URL works for 15 minutes. An export’s download link works for 1 hour.
What happens at a limit
An owner on Free can’t start a plan computer at all: Start answers
402 with code upgrade_required: Your plan does not include running computers. Upgrade to start this computer.
Ask for more
A refusal that carriesupgradeTier: "enterprise", or a dashboard that shows Contact us, means no self-serve plan goes higher. A VM_SLOT_ADDON refusal with credit_usd_needed above 0 is the exception: add that much credit, and the computer can run by the hour. Email us with what you need: more than 999 computers, larger pools, computers past XL, or more people per workspace. Enterprise sets these per account. Rate limits rise with the plan, and Orgo can set an account’s own. If one gets in your way, tell us that too.