Free AI agent action audit. Find the refunds that already went wrong.

Connect Stripe or Shopify read-only and Audon checks up to 90 days of refunds, credits, discounts and cancellations, with your agents’ logs if you have them. Nothing is executed, and the report says what is flagged, what is a suspected loss and what is confirmed.

Start action auditFree Read the audit docs

Free on every plan

No card, nothing to cancel.

Read-only

Nothing is executed and nothing changes in Stripe or Shopify.

Up to 90 days

Stripe or Shopify history, plus agent logs if you have them.

No customer contact data

From Shopify: ids, amounts, statuses and dates, never names or emails.

Four steps. Read-only from start to finish.

1
Connect read-only
Install the Audon app in Stripe or your Shopify store in one click, or paste a Stripe restricted key with read permissions.
2
Add agent logs
Optional: upload your agents’ tool calls as JSONL or OpenTelemetry, so money movements can be tied to agent calls.
3
Run the audit
Up to 90 days of history are imported and checked by the detectors below.
4
Read the findings
Each finding is flagged, a suspected loss or a confirmed loss, with the records it came from.

It imports up to 90 days: charges, refunds, coupons and canceled subscriptions (up to 5,000 per type), and customer balance credits for up to 200 customers seen in the period.

What it finds. Deterministic detectors, the same on every audit.

Detector	Finds
duplicate_refund	More than one refund for the same charge or order.
refund_exceeds_payment	Refunds above the payment, or on a payment already refunded in full.
large_refundlarge_creditlarge_discount	Amounts above three times the period’s 95th percentile or your stated threshold; coupons of 50% or more.
customer_burst	Three or more money actions for one customer within 24 hours.
agent_burst	An agent making at least max(10, 5 × its median) calls in an hour.
failed_action	Actions that failed at the provider.
repeated_action	The same agent, tool and arguments within 10 minutes.
refund_without_intent	With logs: a refund with no matching agent call within 15 minutes.

Flagged action: Worth a look.
Suspected loss: Money that likely left in error.
Confirmed loss: Duplicate refunds that both succeeded at the provider while the log shows two separate refund calls, or a loss a person confirmed.

What the audit reads. Read permissions only.

Stripe and Shopify ask for these when you connect for the audit. Write access is only used once you turn on protection for an agent.

Stripe: charge_read, payment_intent_read, customer_read, coupon_read, subscription_read, event_read
Shopify: read_orders, read_discounts, read_gift_cards, read_customers, read_store_credit_accounts, read_store_credit_account_transactions. Shopify shows the last 60 days of orders unless the app also holds read_all_orders.

After the audit. Protect the next action before it runs.

Agent Action Control checks every refund, credit, discount or subscription change your agents propose against your rules, executes it through the same connector and verifies the outcome. How it works.

Questions before you connect Stripe or Shopify.

What is the free action audit?

A read-only check of what your AI agents and your team have already done with money in Stripe or Shopify: duplicate refunds, refunds above the payment, unusually large credits and discounts, bursts and failed actions. It is the free way into Agent Action Control.

Can the audit change anything?

No. The connector starts read-only and Audon never sends a write with a read-only connector. Protection for live actions is a separate switch a signed-in person turns on later; there is no second install.

Do I need agent logs?

No. Without logs the audit checks the Stripe or Shopify history alone. With logs (JSONL, one tool call per line, or OpenTelemetry spans with gen_ai.tool.name) it can also tie refunds to agent calls and find refunds with no matching call.

What happens to the logs I upload?

Audon doesn’t store the file. It keeps one row per business tool call (time, agent, tool, action type, ids, amount, status and a hash of the arguments, never the arguments or message text) and deletes those rows 7, 30 or 90 days after the audit, as you set; 30 by default.

Does the audit count as prevented loss?

No. The audit finds losses that already happened. They can be recovered, but they are never counted as prevented. Prevention starts when live actions run through Audon.

Last updated 2 November 2026

See what already went wrong. Read-only, free.

Start action auditFree See the spend audit