A platform that gives away unbounded compute and chain operations doesn’t survive. So Smart Engines puts a single, honest gate in front of access: a subscription. You pick a tier, you lock a deposit in HSUITE at a price-locked quote (the HSUITE/USD rate is fixed when you request, so the amount you owe doesn’t drift while you pay), the cluster mints you an on-chain subscription NFT, and from then on every request is checked against your tier’s quota before any work happens.
Nothing here is hidden in a billing database you can’t see. Your subscription has an on-chain receipt, your quota is enforced at the edge, and the cluster watches the clock: you renew with hsuite renew before the lock lapses.
flowchart TD
Dev["Developer / Smart App"] -->|"choose tier"| Req["POST /api/v3/subscription/request"]
Req -->|"any tier (all paid)"| Pending["PENDING_DEPOSIT<br/>(deposit wallet created)"]
Pending -->|"HSUITE deposit confirmed"| Confirmed["DEPOSIT_CONFIRMED"]
Confirmed -->|"mint subscription NFT (XRPL)"| Active
Active -->|"every API call"| Gate{"Tier quota check"}
Gate -->|"within quota"| Work["Request served + metered"]
Gate -->|"over quota"| Reject["429 / blocked"]
Active -->|"renew (hsuite renew)"| Active
Active -->|"lock lapses / NFT leaves wallet"| Expired["EXPIRED"]
The subscription NFT lives on XRPL — the canonical ledger for the HSUITE ecosystem. Tier and quota state live in the cluster’s record for your app; the NFT is the on-chain proof that the subscription exists and belongs to you.
Define the rules: a monthly USD price plus per-service monthly allowances (validator txns/signs/entities, host storage/db-ops/fn-invocations/app slots, gateway bandwidth/domains, Harbor repos, smart-agent budget), plus declared networks and feature flags.
The NFT
The on-chain receipt that you hold a subscription, issued on XRPL and signed by the validators’ threshold multisig, never a single key.
Gating
Reads your tier on every request and refuses anything outside your quota or your tier’s capability limits.
Renewal
You renew with hsuite renew; renewal, upgrades, downgrades, and same-tier float top-ups all flow through the same deposit-backed machinery. A drained prepaid balance can be re-funded in place (hsuite topup) without changing tier — see Renewal lifecycle.