Share feedback
Answers are generated based on the documentation.

Organization policy limits


Organization policies have the following limits, which help ensure fair usage and resource availability across organizations:

LimitValueApplies to
Policies per organization100All organization policies combined, whatever their type
Rules per policy250Each network or filesystem policy. MCP policies don't have a rule limit.
Policy size400 KBEach policy, whatever its type

The policies per organization limit is one shared total, not a separate allowance for each policy type. For example, an organization with 60 network policies, 30 filesystem policies, and 10 MCP policies has reached the limit.

The policy size limit applies to each policy as Docker stores it. This includes the policy's content, such as its name, description, scope, and rules or Cedar statements, plus a small amount of metadata that Docker stores with every policy. Typical policies use only a small fraction of this limit. Domain and file path values have no separate length limit beyond valid format. Because MCP policies have no rule limit, the policy size limit is what caps how many Cedar statements an MCP policy can hold.

If these limits don't fit your organization's needs, contact Docker Sales to discuss options.