# Limits and Quotas (/docs/developer-resources/guides/webhook/limits-and-quotas)

This page lists the webhook limits defined by the current API contract. The
HMAC secret rule follows Monime's webhook verification contract.

## Webhook configuration

| Field          | Limit                       |
| -------------- | --------------------------- |
| Name           | 1 to 100 characters         |
| URL            | Up to 255 characters        |
| Events         | 1 to 100 unique event names |
| Custom headers | Up to 10 per webhook        |
| Alert emails   | Up to 2 unique addresses    |
| HMAC secret    | 32 to 100 characters        |
| Metadata       | Up to 64 properties         |
| Metadata value | Up to 100 characters        |

The selected event names must belong to the webhook's API release. See
[Events and Payloads](/docs/developer-resources/guides/webhook/structure-and-events)
for the current release registry.

## Listing webhooks

The List Webhooks endpoint uses cursor pagination:

| Parameter | Contract                                                      |
| --------- | ------------------------------------------------------------- |
| `limit`   | Integer from 1 to 50; defaults to 10                          |
| `after`   | Cursor returned as `pagination.next` by the previous response |

Pass `pagination.next` as the next request's `after` value. A `null` next
cursor means you have reached the final page.

## Limits outside the API contract

The current OpenAPI files do not specify a maximum webhook count per Space,
delivery payload-size limit, delivery-rate limit, replay cooldown, or delivery-log
retention period. Treat values shown in the Dashboard as operational product
information rather than API-contract guarantees.