# Natrium pricing.md - Agent Pricing, Quotas & Resource Limits

Welcome to the **Natrium Sovereign Communication Platform** agent pricing and quota specification. This contract defines fee structures, rate limits, storage allocations, and support paths for autonomous AI agents, personal users, and automated integrators.

---

## Service Tiers & Pricing Model

Natrium provides three transparent tiers engineered for uncompromising privacy and zero-knowledge encryption. We operate zero advertising networks, employ zero behavioral trackers, and never monetize user activity.

| Tier | Monthly Fee | Annual Discount | Mailbox Storage | Domains & Aliases | Key Capabilities |
| :--- | :--- | :--- | :--- | :--- | :--- |
| **Sovereign Community (Free)** | $0.00 | $0.00 | 5 GB AES-256 | 3 @natrium.sh address | Zero-knowledge client-side encryption, VirusTotal scanning, tracker & ad blocking |
| **Sovereign Pro** | $4.99 | $3.99 / mo ($47.88/yr) | 15 GB High-Speed | 5 Aliases, 1 Custom Domain | Hardware FIDO2 Passkeys, 100 MB attachments, custom rules, priority queue |
| **Sovereign Business** | $14.99 | $11.99 / mo ($143.88/yr) | 50 GB Dedicated | Unlimited Domains & Aliases | Team admin console, dedicated MTA relays, SIEM audit streams, 24/7 priority support |

---

## Resource Limits & Quotas

To protect infrastructure integrity and ensure pristine deliverability, accounts are provisioned with the following operational quotas:

- **Authentication Endpoints:** 60 requests per minute per IP
- **Message Dispatch (POST /api/email/send):**
  - Community: 30 messages per minute
  - Pro: 120 messages per minute
  - Business: Unlimited / custom dedicated relay
- **Message Retrieval & Search (GET /api/email/search):** 120 queries per minute per session
- **Attachment Threat Screening (VirusTotal Multi-Engine):**
  - Community: Up to 25 MB per file
  - Pro & Business: Up to 100 MB per file
- **Public Metadata Discovery (.well-known/*):** Unthrottled via globally distributed edge cache

---

## Authentication Requirements

Agents and automated systems must present valid credentials in standard HTTP request headers:

```http
Authorization: Bearer <agent_access_token>
```

Refer to [https://natrium.sh/auth.md](https://natrium.sh/auth.md) for full onboarding, ID-JAG token exchange, and credential claim specifications.

---

## Plan Management & Upgrades

Users can view and transition their subscription tiers directly inside their authenticated account:
- Via Profile Menu: click your avatar in the upper right &rarr; **Manage Plan / Upgrade**
- Via REST API: `GET /api/user/plan` to inspect available tiers; `POST /api/user/plan` with `{ "plan": "Pro" }` to update tier.

---

## Support & Security Escalations

- **Security Vulnerabilities:** security@natrium.sh (PGP Key available at /.well-known/security.txt)
- **Agent Integration Issues:** support@natrium.sh
- **Abuse & Telemetry Inquiries:** abuse@natrium.sh