Limits

Every number here comes from OpenGame’s limits file, version 2026-10. The CLI ships with a copy and the server enforces the same file. The limits are grouped by the step where you meet them. Before each upload, opengame deploy reads GET /api/v1/bootstrap for the current archive and file limits and the oldest CLI the server accepts. /api/v1/limits answers the same. A tightened limit applies to new deploys only, so a release that already passed stays valid.

Package your bundle

The CLI checks these before it uploads, and the server checks them again. A bundle over any of them fails.

Limit	Value
Archive size	200 MiB The zip the CLI builds when you deploy. It caps how much we transfer and scan.
Unpacked size	250 MiB What the archive expands to. We scan every byte and serve it from our storage.
Files	3,000 We scan and hash each file separately. If you are close, merge small files.
Compression ratio	200:1 Guards uploads against zip bombs. The CLI stores files uncompressed rather than go over it.
Entry point	`index.html` At the root of the build output. Its case must match the file on disk.
`opengame.json`	64 KiB It is sent beside the archive, not inside it, so it has a separate cap.

Fill in `opengame.json`

The website edits the same fields.

Limit	Value
Title, minimum	3 characters Shorter titles are too vague for a player to search for.
Title, maximum	40 characters It has to stay legible on a generated cover at gallery thumbnail size.
Tagline	140 characters One line under the title.
Description, minimum	40 characters Enough for a reviewer and a player to tell what the game is.
Description, maximum	500 characters The longest the site stores.
Leaderboards per game	10 Each board shows inside your game, and a short list keeps board keys from piling up.
Board key	48 characters Lowercase letters, digits and underscores, starting with a letter.
Board label	60 characters Shown above the board inside your game.
Achievements per game	100 Switched-off achievements count too: players keep what they unlocked, so none is deleted.
Achievement id	48 characters Lowercase letters, digits, hyphens and underscores, starting with a letter or digit. The id `og.achievements.unlock` sends.
Achievement title	120 characters Shown to players with the achievement.
Achievement description	500 characters Optional. How to earn it.
`maxPlayers`	16 The broker’s room limit. Before you choose a capacity, measure the host’s upload bandwidth and frame time in your game.

Limit	Value
Device code	10 minutes How long `opengame login` waits for you to approve in the browser.
`login --continue` under an agent	10 seconds How long it waits for approval before it exits 3 and asks to be run again.
Device code length	8 characters You type it on the approval page before you allow.
Device name	60 characters Shown on the approval page and in your token list.

Deploy a release

Per account, unless a row says otherwise.

Limit	Value
Deploys an hour	30 Also counted per token.
Upload attempts	3 Per deploy. After the last one, start a new deploy.
Upload timeout	10 minutes The least time one PUT of the archive gets. A larger archive gets longer.
Build timeout	10 minutes For your build command, on your machine.
Scanned in 24 hours	2 GiB We scan every uploaded byte. This caps how much one account can ask us to scan in any 24 hours.
Held at once	5 GiB Uploaded bytes kept for your releases and failed deploys. You have nothing to delete by hand: failed deploys clear on their own, and each game keeps only its newest releases.
Releases kept per game	10 Older releases that were not published or entered lose their bytes.
Idempotency key	128 characters Letters, digits and `._:-`.
Watch timeout	5 minutes How long `deploy --wait` and `status --watch` follow the checks before they exit 5 with `checks_pending`. `--timeout` shortens it. A plain `deploy` does not wait.

Preview and submit

Limit	Value
Preview lifetime	1 day Each time you open the private page, you get a new preview link to the same release.
Submissions a UTC day	10 Per account. The count starts again at midnight UTC. Over it, submit exits 4 with `submission_quota_exhausted` and nothing is submitted.
Playtest runs in 24 hours	10 Each submit runs one bot playtest on a GPU, counted over any 24 hours. Once they are used up, submit stops before any GPU time is spent.
Bot playtest	45 seconds A bot gets past your menu and plays with the controls.
Agent playtest	4 minutes An AI agent plays your game and judges its depth and effort.
Jam entries	2 Live entries per person per jam.

Pass the performance checks

A game that misses one of these gets a warning, except First frame.

Limit	Value
Initial download	50 MiB Bytes before the first playable frame. Players leave while it loads.
Time to playable	10 seconds From page load to `og.ready()`, or estimated from frame stability without it. It includes the time spent getting past your menu.
First frame	30 seconds A game with no frame by then fails the playtest run at submit.
Median frame rate	45 fps At 1080p on the test GPU.
Peak memory	1.2 GiB The highest heap during the measured run.

Test at desktop sizes

The playtest run opens your game at each of these sizes and resizes it once without a reload.

Size	Width × height
1080p (primary)	1920 × 1080
Laptop	1366 × 768
QHD	2560 × 1440
Ultrawide	3440 × 1440
Small	1024 × 640

Reach the network from your game

Every runtime contract lets a game reach these OpenGame hosts. From contract 2027-03, which every new upload gets, a game may also reach any other https: or wss: host, except the services under What a game may not do.

Limit	Value
Game API	`https://api.opengame.gg` Leaderboards, events, achievements and the player’s country.
Multiplayer broker	`wss://rtc.opengame.gg` Signalling for rooms.
Multiplayer broker, HTTPS	`https://rtc.opengame.gg` The same broker. The SDK fetches a peer id and relay credentials from it before it opens the socket.
Stylesheets	`https://fonts.googleapis.com` For releases on contracts before 2027-03. From 2027-03 a game may load stylesheets, fonts and scripts from any `https:` host.
Fonts	`https://fonts.gstatic.com` For releases on contracts before 2027-03.

What a game may not do

These are refused whatever host a game uses. The checks look for the services listed here, and a reviewer plays every game against the rule, so a service missing from the list is not allowed either.

Category	Rule
Payments	Games on OpenGame are free to play. A game may not take money, tips, donations or card details, or send players to a page that does. The checks look for Stripe, PayPal, Paddle, Lemon Squeezy, Gumroad, Square, Adyen, Checkout.com, Xsolla, Google Pay, Apple Pay, the Payment Request API and a tip jar.
Crypto	Games on OpenGame may not use crypto wallets, tokens, NFTs or blockchains, and may not mine. The checks look for a crypto wallet, a blockchain node, a service that sells crypto and a crypto miner.
Accounts	Players start playing without making an account, signing in, or giving an email address. OpenGame gives every game a player through the SDK, so a game never needs its own sign-in. The checks look for Google sign-in, Sign in with Apple, Facebook login, an OAuth sign-in, a sign-in service, Supabase sign-up, Firebase email sign-in, PlayFab email sign-in and an email sign-up form.
Ads	Games on OpenGame may not show ads. A portal SDK such as Poki’s or CrazyGames’ serves ads, so remove it. The checks look for an ad network and a game portal SDK.
Tracking	Games on OpenGame may not carry ad pixels or session recording. Use the SDK’s events for analytics. The checks look for an ad pixel and session recording.

Call the SDK

The SDK’s own limits, and the platform’s limits on what a game sends it.

Limit	Value
`og.init()` handshake	4 seconds The injected SDK starts this handshake at script load on hosted game origins. `init` adopts it. On a hosted origin, a timeout leaves services unavailable; other origins use the local mock. A pending session can extend the wait.
Core SDK size	12 KiB Gzipped. Multiplayer is a separate entry.
`og-platform.js` size	14 KiB Gzipped. The core is inside it.
Events a minute	60 Per session. Sent in batches, and again when the page closes.
Events per session	200 Counted per page load. After this many, `track` returns `rate_limited` until the page reloads.
Event batch	10 seconds How often events are flushed.
Event name	48 characters Lowercase letters, digits and underscores, starting with a letter.
Event size	1 KiB The name and properties together. An event is a fact, not a payload.
Event property keys	`level`, `mode`, `difficulty`, `score`, `duration_ms`, `result`, `step`, `board`, `fps`, `heap_mb`, `sample_rate` Only these keys are accepted, to keep personal data out of events.
Score meta	384 bytes Extra data attached to a score.
Score meta strings	24 characters Kept short. A value shaped like an email address or a long number is refused.
Scores per read	100 `top` returns at most this many.
`around()` radius	10 Entries either side of the player.
Board cache	30 seconds A new best appears on `top` within this.
Scores a minute, per session	60 Over it, `submit` returns `rate_limited` and the score is not saved. Try again after a minute.
Scores a minute, per player	120 All of one player’s sessions together.
Scores a minute, per address	300 All players on one network address together.

Run a multiplayer room

Limit	Value
Room nickname	32 characters A room nickname does not change the player’s account handle.
Room settings	4 Choices belong to this release’s manifest.
Choices per setting	6 The host selects from these IDs.
Setting and choice ID	16 characters Lowercase letters, digits and underscores, starting with a letter.
Setting and choice label	48 characters Shown in the OpenGame lobby.
Choice description	120 characters Optional. A short line a player reads at a glance.
Room settings declaration	4 KiB The encoded settings in `opengame.json`.
Room code	8 characters The code a host shares. It leaves out I, O, 0 and 1, which are easy to mix up, and joining ignores case.
Message size	16 KiB Per message, after JSON encoding.
Snapshot backlog	64 KiB Unreliable sends stop at this, so a slow peer gets the latest state.
Peer backlog	1 MiB A peer this far behind is disconnected.
Connect timeout	12 seconds `host()` and `join()` reject with `timeout` after this.
Liveness	15 seconds Any message counts. A silent peer is dropped after this.
Longest session	3 hours Per signalling connection.
Rooms an hour	20 Per network address, so one player cannot fill the broker with empty rooms.

Start

Guides

Reference

Package your bundle

Fill in `opengame.json`

Deploy a release

Preview and submit

Pass the performance checks

Test at desktop sizes

Reach the network from your game

What a game may not do

Call the SDK

Run a multiplayer room

​Package your bundle

​Fill in opengame.json

​Sign in from the CLI

​Deploy a release

​Preview and submit

​Pass the performance checks

​Test at desktop sizes

​Reach the network from your game

​What a game may not do

​Call the SDK

​Run a multiplayer room

Package your bundle

Fill in `opengame.json`

Sign in from the CLI

Deploy a release

Preview and submit

Pass the performance checks

Test at desktop sizes

Reach the network from your game

What a game may not do

Call the SDK

Run a multiplayer room