LinkedIn Outreach With AI Drafts, Inside LinkedIn's Rules

The short answer: LinkedIn does not permit third-party tools that automate activity on its website, and says members who use them risk having their accounts restricted or shut down (LinkedIn Help). So the agent drafts and a person sends: the profile owner approves each message sequence once, then sends every message by hand, with LinkedIn's own Message Assist drafting first-touch InMails on Sales Navigator Advanced, €148.21 a month, up to 50 AI-assisted messages a month (Sales Navigator plans, Message Assist FAQ, checked on 26 October 2026). For example, 60 messages a week written from a blank page at 4 minutes each take 60 x 4 = 240 minutes; reviewing a draft at 90 seconds each takes 60 x 1.5 = 90.

Disclosure: I may earn a commission through some links on this site. It does not change what this page says.

Inside the rules means one thing in practice: the agent never touches the send button. Everything on this page follows from that line.

Before anyone drafts a message:

1. Your weekly capacity, by hand. For example, 15 invitations a day over five working days is 15 x 5 = 75 a week, plus follow-ups to the people who accept. LinkedIn does not publish its invitation limit; its help page says a restriction usually lasts a week, withdrawing pending invitations does not lift it and support cannot shorten it (invitation limit). Pace by acceptance, not by a number from a tool vendor.
2. The note allowance, which LinkedIn states two ways. You are not misreading it. "Invitation limit reached" gives free members five personalised notes a month (help page); "Personalize invitations to connect" gives three, at 200 characters each (help page). Both give Premium members unlimited notes. Plan on three.
3. What you already hold. Target accounts and call notes in your CRM, one case study per segment, and the five messages from the profile owner that got replies. Those are the agent's inputs.
4. The baseline. Acceptance rate, reply rate and meetings per 100 accepted invitations over the last four weeks of hand-written outreach.

What LinkedIn's terms rule out

Section 8.2 of the User Agreement bars using "bots or other unauthorized automated methods" to add contacts or send messages, bypassing LinkedIn's use limits, using another member's account, sharing log-in credentials or copying cookies included, and copying information obtained from LinkedIn without the content owner's consent (User Agreement). Section 3.4 reserves the right to restrict, suspend or terminate an account that breaks them, and the prohibited-software page adds that such tools can stop working without notice.

The same contract points to the setup that works. Section 3.6 tells members to review and edit what LinkedIn's generative AI features produce before sharing it, and LinkedIn sells its own drafting assistant. AI drafting is expected; automated sending is not.

The workflow inside the rules

1. Monday: the week's list comes from your CRM. At the pace above, 75 people for one sender. Building a list by hand or in Sales Navigator is fine; pulling it out of LinkedIn with a scraper is what section 8.2 bars.
2. The agent drafts the sequence, not each message. Give the AI assistant your team already uses four inputs, namely the offer, the segment's case study, the CRM notes and the owner's five messages that got replies, and ask for one sequence per segment: an invitation note under 200 characters, a first message after acceptance, one follow-up a week later, and a rule to stop after no reply. Keep LinkedIn profile data out of that chat, since copying it into another tool without the owner's consent is on the 8.2 list. Personalisation from LinkedIn happens inside LinkedIn, in step 4.
3. The profile owner approves the sequence. The person whose name is on the profile reads it, edits it and signs it off with a date in the sheet. Any change to the sequence needs a new sign-off. No sequence goes out that its sender has not read.
4. Personalise inside LinkedIn. In Sales Navigator, the compose window shows conversation insights: shared experiences, recent activity, job changes and company growth (conversation insights). On Advanced, Message Assist, in public beta (AI for sales), drafts a first-touch InMail from Lead IQ and Account IQ data, one lead at a time, at most six a minute and 50 a month; each uses an InMail credit that comes back if the lead replies, and LinkedIn's advice is to review and edit the draft before sending (Message Assist FAQ). Use the approved sequence as the frame and the insight as the first line.
5. Send by hand, one at a time. The invitation, then the first message when someone accepts, then the follow-up. LinkedIn does not let you send InMail in bulk and offers no InMail templates (InMail help). If an invitation restriction appears, stop for the week.
6. Replies go to a person, and into the CRM. The sender answers, then logs the reply and its stage. On Sales Navigator Advanced Plus with CRM logging switched on, InMails log to the CRM by themselves, per the same help page.
7. Output: a weekly log. Sent, accepted, replied and meetings, per sequence version, in the sheet that holds the sign-offs.

The free version

A free LinkedIn account, the approved sequence, an AI assistant you already pay for or use free, and a sheet. With three notes a month, most invitations go without one, so the sequence does its work in the first message after acceptance. One sender at 75 invitations a week is a real programme for a founder or a small team, and nothing in it touches LinkedIn's terms.

What LinkedIn's paid plans add

Premium Business adds AI message drafts and 15 InMail credits a month, Premium All-in-One 30, and Sales Navigator 50, with advanced search filters, Account IQ and Lead IQ (LinkedIn comparison). Premium members can add a note to every invitation (invitation limit). Sales Navigator Core costs €120.99 a month or €1,088.88 a year per licence, Advanced €148.21 a month or €1,693.88 a year; LinkedIn calls these estimates that may exclude VAT (Sales Navigator plans, checked on 26 October 2026). The trial asks for a card and LinkedIn emails a reminder seven days before it ends, per the same page.

Where HeyReach, Expandi, La Growth Machine and Waalaxy sit

These tools run LinkedIn actions from your profile in their own cloud, on a schedule. That is the activity LinkedIn's prohibited-software page rules out, whatever the daily volume, and none of the vendor pages cited here says LinkedIn permits it. Waalaxy's own quotas article explains that it sets a random daily quota between 80% and 100% of the maximum to prevent behaviour "that could alert LinkedIn to the use of an automation tool" (Waalaxy quotas).

Their AI connectors differ in how much they leave to a person. Expandi's MCP drafts campaigns and replies, sends a reply only on your approval, and never activates a campaign or edits a running one (Expandi MCP). La Growth Machine's assistant asks before every action that sends a message or edits or launches a campaign, by default, with an option to always allow a tool (LGM MCP article). HeyReach's MCP page offers to launch campaigns straight from the chat (HeyReach MCP).

All prices were read on 26 October 2026. Read the automation offers next to the contract. Expandi's pricing page lists "Campaign Types that Allow Bypassing Outreach Limits" as a feature of the $99 seat, its example a Mobile Connector that adds 100 connection requests a week (Expandi pricing), while section 8.2 bars bypassing LinkedIn's use limits. The seat stays billed either way: Expandi's seats article names a restricted LinkedIn account as a reason to transfer the seat to another profile (seats article). The extra requests are sold by the vendor; the restriction is carried by the person in the profile photo.

If a team decides to carry that risk anyway, the decision belongs to the profile owner, in writing, and the approval rule on this page still holds: no sequence starts that its sender has not signed. The per-tool detail is in how to use Expandi and how to use La Growth Machine.

How to know it worked

Four numbers: acceptance rate, reply rate on accepted invitations, meetings per 100 accepted, and restriction notices, which should stay at zero. Compare the first four drafted weeks with the four-week baseline from the top of the page.

Then a holdout inside the same weeks. Split each week's list by alternate rows: one half gets messages the sender writes from scratch, the other the approved sequence with an insight-led first line. Both halves go out by hand from the same profile, so the draft is the only difference. After 100 accepted invitations in each half, compare meetings. If the drafted half books no more meetings, the agent saves time and nothing else; that can be worth it, as long as you know which it is.

If the hard part turns out to be making the drafting, the sign-off and the CRM log into a routine a whole sales team keeps, that is a build my agentic marketing work covers, so weigh this paragraph as the one place on the page where I am selling.

FAQ

Is an automation tool fine if it stays under LinkedIn's limits?

No. LinkedIn's prohibition is on the tools themselves: it does not permit third-party software that automates activity on its website, and members who use such tools risk a restricted or closed account at any volume (LinkedIn Help).

Does the recipient see that AI drafted the message?

Not with Message Assist: LinkedIn's Sales Navigator community FAQ says the recipient is not notified that AI helped (Message Assist FAQ). Section 3.6 of the User Agreement still makes you responsible for reviewing what LinkedIn's generative AI produces before you share it.

What happens when I hit the invitation limit?

Sending invitations is usually blocked for about a week. You cannot buy more invitations while restricted, withdrawing pending ones does not help, and LinkedIn support cannot shorten the wait (invitation limit).