diff --git a/internal/api/grpc/server/gateway.go b/internal/api/grpc/server/gateway.go
index 83be0d927..b15ec6791 100644
--- a/internal/api/grpc/server/gateway.go
+++ b/internal/api/grpc/server/gateway.go
@@ -132,6 +132,7 @@ func CreateGatewayWithPrefix(
 			client_middleware.UnaryActivityClientInterceptor(),
 		),
 		grpc.WithStatsHandler(client_middleware.DefaultTracingClient()),
+		grpc.WithDefaultCallOptions(grpc.MaxCallRecvMsgSize(MaxSendMsgSize)),
 	}
 	connection, err := dial(ctx, port, opts)
 	if err != nil {
@@ -159,6 +160,7 @@ func CreateGateway(
 				client_middleware.UnaryActivityClientInterceptor(),
 			),
 			grpc.WithStatsHandler(client_middleware.DefaultTracingClient()),
+			grpc.WithDefaultCallOptions(grpc.MaxCallRecvMsgSize(MaxSendMsgSize)),
 		})
 	if err != nil {
 		return nil, err
diff --git a/internal/api/grpc/server/server.go b/internal/api/grpc/server/server.go
index 5d6b4f317..a3719551e 100644
--- a/internal/api/grpc/server/server.go
+++ b/internal/api/grpc/server/server.go
@@ -24,6 +24,10 @@ import (
 	system_pb "github.com/zitadel/zitadel/pkg/grpc/system"
 )
 
+const (
+	MaxSendMsgSize = 10 * 1024 * 1024 // 10MiB, global value required for exports.
+)
+
 type Server interface {
 	AppName() string
 	MethodPrefix() string
@@ -90,6 +94,7 @@ func CreateServer(
 			),
 		),
 		grpc.StatsHandler(middleware.DefaultTracingServer()),
+		grpc.MaxSendMsgSize(MaxSendMsgSize),
 	}
 	if tlsConfig != nil {
 		serverOptions = append(serverOptions, grpc.Creds(credentials.NewTLS(tlsConfig)))