Limits

rayfin.dev is for trying apps, so everything here is small and temporary. These are the current effective limits. The operator can adjust them, or pause new apps and claims, at any time.

Lifetime

Hosting
24 hours from creation
A place to try an app, not to run one.
Extension
24 hours more, once
Given when a signed-in person reaches the workspace step of a claim.
Claim window
3 days after expiry, 7 days with a claim page view or started claim
A kept copy can still be claimed, but it is no longer served. Existing apps keep their saved window.
Never deployed
Deleted at expiry
There is nothing to claim.
After a claim
A moved-to-Fabric notice for 24 hours
People with the old link learn where the app went.

Size

Upload
25 MB, compressed
Built single-page apps are usually far smaller.
Unpacked app
100 MB
Bounds the disk each app uses.
Largest file
32 MB
Keeps checking and serving each file predictable.
Files
2,048 per upload
Keeps each upload quick to check.
Compression
At most 100 to 1 per file
Rejects archives built to expand without limit.
Metadata files
1 MB each
manifest.json, rayfin.yml and the schema are read into memory to validate the app.
App database
50 MB
Room for sample data, not for a real workload.
Request body
1 MB
For each API call except signed file uploads.
File storage
200 MB
Committed files plus reserved upload space, per app.
Stored objects
1,000 per app
Pending uploads also reserve object slots.
Largest stored file
25 MB
Folders may set a smaller limit or restrict content types.

Rate

Counted per shared network address unless noted. Offices and VPN egress count together. Both address and device limits must allow a create. Quota 429s name the scope and window and say how long to wait; legacy clients without a device hash keep the same daily limit per signing key.

New apps
10 per hour and 100 per day
Sliding windows: an hourly burst guard and a shared daily allowance.
New apps per device
20 per day
Counted per device, so new signing keys on the same machine share it.
Proof of work
One for each new app
The rfd CLI solves it for you. It makes creating apps in bulk costly.
Requests to rayfin.dev
120 per minute
Protects the shared service.
Requests to an app
300 per minute, per app
Enough to try an app, not to load-test it.
Open connections
20 per app
Many apps share each server.
Daily transfer
200 MB per app, per UTC day
An abuse allowance, not expected usage. Static requests return 503 and API requests 429 when used up, with Retry-After until midnight UTC.

Capabilities

File storage
Available in the sandbox
The storage pack supplies file upload and download. Uploaded files do not migrate on claim.
Functions
Labeled browser preview only
Untrusted caller-side execution, not hosted server code or a place for secrets. Real functions require a human-local Fabric claim.
Connectors
Recorded results only
Explicit, labeled recordings; no live Fabric data. Synthetic data requires the user's agreement.
Realtime and email
Not available
These services are outside this free tier.
Moving data on claim
Not in this version
The site and its schema move to Fabric; test users, rows and uploaded files stay behind.
Custom domains
Not available
Each app is served only at its own rayfin.app address.