How do you use AI for LinkedIn outreach without breaking LinkedIn's rules?

The short answer

Let AI do the reading and the drafting, and do the sending yourself, one person at a time, from your own LinkedIn account. LinkedIn's help page on prohibited software says it does not permit third-party tools that "scrape, modify the appearance of, or automate activity" on the site, and accounts that use them risk being restricted or shut down. Drafting a note from a profile you opened and read is fine; a tool that visits profiles, sends invitations or messages for you is not.

Updated

What does LinkedIn prohibit, and what does it allow?

Bots are the problem, not words. Section 8.2 of the User Agreement bans using "bots or other unauthorized automated methods" to add contacts or "send or redirect messages," and section 3.4 lets LinkedIn limit "your ability to contact other Members."

No clause bans text you drafted with an outside AI tool. Section 3.6 covers LinkedIn's own generative AI features: it says to "review and edit such content before sharing with others" and makes you responsible for what you post. The rule is about who acts on the site, not who wrote the words.

Action Allowed? LinkedIn source
Draft a note in an outside AI tool from a profile you opened Not banned; you own and answer for the text User Agreement 3.6 (review AI text), 8.2 (no rule on drafting)
Extension that auto-visits profiles, sends invites or messages Not allowed Help: Prohibited software; User Agreement 8.2
Tool that scrapes profiles into a list Not allowed User Agreement 8.2
Pitch inside a connection request to a stranger Against policy (spam) Professional Community Policies
Sharing your login so a VA or tool sends from your account Not allowed User Agreement 2.2 and 8.2

LinkedIn also says banned tools "may become non-operational without notice," and its invitation page recommends inviting people "you know and trust." This is what LinkedIn's pages say, not legal advice.

Where is AI safe to use in LinkedIn outreach?

Our guidance: AI touches the words, never the account. Three safe jobs: summarize what you read, draft the note or message, and check your draft against your rules (length, no pitch, nothing creepy).

Step AI does You do
Research Turns the pasted headline, About and last two posts into three facts, each tagged with where it appeared Open the profile, copy the text, confirm every fact is really on the page
Connection note Drafts three versions under 200 characters, no pitch Pick one, cut anything that sounds like a sales line, click Connect, paste

The AI only knows what you pasted: a fact it "finds" beyond that is invented. Paste public professional text only, and never ask it to guess an email (how to find a work email). Time cap: how much time to research a prospect.

What are LinkedIn's limits on notes, messages and InMail?

LinkedIn does not publish a number for weekly invitations, and we are not going to make one up.

Limit What LinkedIn says
Personalized notes, free account Up to "three connection requests per month," up to 200 characters each (Personalize invitations page, updated 5 months ago). The older Invitation limit reached page still says five. LinkedIn contradicts itself
Personalized notes, Premium Unlimited, though "connection request limits may still apply"
Total invitation limit Applies to every member, Basic and Premium. No number published. Hit it and the restriction "typically lasts one week"; withdrawing pending invitations does not lift it, and LinkedIn cannot shorten the wait
Monthly InMail credits Premium Career 5, Premium Business 15, Sales Navigator Core 50
InMail credit back Returned if the InMail is accepted, declined or answered within 90 days; no second InMail to that person until they respond

What this means: on a free account the bottleneck is the note budget, not drafting speed. Plan on three (if your account allows five, bonus), give them to your best-fit prospects, and send everyone else a plain request.

How do you run the LinkedIn touches of a cadence with AI?

Our house cadence gives LinkedIn two touches per prospect (a profile view, then a no-pitch request); see multichannel prospecting cadence and sales sequence structure. Inside those touches, one batch per sitting (our guidance):

  1. Open the profile and read the headline, About and last two posts. Sixty seconds.
  2. Paste it into the research prompt below, get three facts with locations, and delete any you cannot see on the page.
  3. Run the note prompt only if this prospect gets one of your notes this month. Otherwise send a plain request.
  4. When they accept, run the first-message prompt, edit, send.
  5. Send one follow-up at most, then move the conversation to email or a call.

Stop rules: any reply ends the sequence, an AI draft never goes out unread, and the calendar ask waits for their reply. Email takes over in cold emails that work.

What does one rep's LinkedIn week look like?

Our example, invented person, company and numbers. Nadia sells payroll software for restaurant groups at Corvan. She runs the cadence at 40 new prospects a week on a free account.

  • Touches and note budget: 40 prospects x 2 touches = 80 a week, no InMails. 40 requests a week is about 173 a month (40 x 52 / 12 = 173.3). Three carry a note, about 1.7%; the other 170 go plain. The three notes go to the three accounts her AE flagged as tier A.
  • Time (our guidance): 60 seconds to read, 30 to paste and run the research prompt, 30 to delete invented facts and click Connect = 2 minutes a request. 40 x 2 = 80 minutes a week, 16 a day over five days. In the week she spends her three notes, add 3 x 5 = 15 minutes: 95.
  • Accepts: we will not invent her acceptance rate. Each accept costs about 3 minutes (paste, prompt, edit, send): ten accepts = 30 minutes, 25 = 75. Her weekly LinkedIn block lands between 110 minutes (80 + 30) and 170 (95 + 75).
  • If she bought Premium Business: a note on every request adds 40 x 5 = 200 minutes a week. That is the real price of "personalize everything": time. Our guidance: notes for tier A and B only.

What should the note and the first message say?

The note: under 200 characters, one real thing from their profile, one reason to connect. No product, no link, no "quick call." LinkedIn's policy says not to use invitations to "send promotional messages to people you don't know."

Our guidance: a shared-context line, a relevance line (your topic, not an offer), or a plain request with no note. Two invented drafts, scored:

Draft (invented) What is wrong or right Verdict
"Love your content! Let's connect and I'll show you how we 3x pipeline" Flattery, a pitch, and a claim nobody can check Rewrite
"Saw your post on splitting SDRs by segment. Working on the same problem at Corvan, would be good to compare notes." (114 characters) One real fact, one honest reason Send

First message after the accept (our guidance, under 50 words): thanks, the one fact, a question they can answer in a line. No attachment, no calendar link. One useful follow-up, then stop on LinkedIn.

The three prompts

Our own prompts; replace the [BRACKETS].

A. Research

Below is text I copied from one LinkedIn profile: headline, About, and the last two posts. List the three most useful facts for a B2B seller who sells [WHAT YOU SELL] to [BUYER ROLE]. For each fact, name the section it came from. Use only what is in the text; if there are fewer than three real facts, say so. No compliments, no guesses about their problems. [PASTED PROFILE TEXT]

B. Connection note

Write three connection-request notes to [FIRST NAME], each under 200 characters including spaces. Base each on one of these facts I verified: [FACT 1], [FACT 2], [FACT 3]. Rules: say why I want to connect, mention my work as a topic ([TOPIC]) not an offer, no product name, no link, no meeting ask, no exclamation marks. Show your character count after each note (I will recount).

C. First message after accept

[FIRST NAME] accepted my connection request. Write a message under 50 words: thank them in one short line, refer to [FACT], then ask one question about how their team handles [THE PROBLEM I WORK ON] that they could answer in a sentence. No pitch, no link, no calendar ask, no bullet points.

For more prompts, see AI prompts for sales prospecting; the auto-sending contrast case is what is an AI SDR.

Do you need Premium or Sales Navigator for AI-assisted outreach?

Not for drafting: the AI runs outside LinkedIn. Premium lifts the note cap, and InMail (15 a month on Premium Business, 50 on Sales Navigator Core) reaches people outside your network. Prices: is Sales Navigator worth it.

When should you skip Premium and Sales Navigator for this?

  • Skip Premium if fewer than three monthly requests deserve a note.
  • Skip Sales Navigator if your LinkedIn step is the two no-pitch touches and your meetings come from email and calls.
  • Skip planning around LinkedIn's own Writing Assistant: the help page we read (messages to recruiters) limits it to desktop, English and select US Premium subscribers.

Sources

Research and vendor pages accessed October 6, 2026.

Frequently asked questions

Does LinkedIn ban you for using ChatGPT or another AI to write messages?

No clause bans it. You answer for what you send; what the User Agreement bans is unauthorized automation of the account.

Is copying a profile into an AI tool the same as scraping?

Not in the bot sense: 8.2's scraping clause names software, scripts, crawlers and plugins. But 8.2 also bars copying or using content from the Services without the owner's consent, and LinkedIn publishes no one-profile exception. Our reading, not legal advice: want zero doubt? Type the three facts yourself instead of pasting.

How many personalized connection notes can a free account send?

Three a month, up to 200 characters each, per the help page updated most recently. An older page still says five. Premium removes the cap.

Can you send a second InMail to someone who did not answer?

Not until they respond, per LinkedIn's InMail page.

What happens if you hit the invitation limit?

You are typically blocked from sending invitations for a week, withdrawing pending invitations does not lift it, and LinkedIn cannot shorten it.

Keep reading