---
title: "Free AI agent action audit: Stripe and Shopify · Audon"
description: "A free, read-only audit of up to 90 days of Stripe or Shopify history and agent logs: duplicate refunds, refunds above the payment and unusual credits."
url: https://audon.ai/audit/actions
last_updated: 2026-11-02
---
# Free AI agent action audit. Find the refunds that already went wrong.

Connect Stripe or Shopify read-only and Audon checks up to 90 days of refunds, credits, discounts and cancellations, with your agents’ logs if you have them. Nothing is executed, and the report says what is flagged, what is a suspected loss and what is confirmed.

[Start action auditFree](https://audon.ai/sign-up?intent=integrity) [Read the audit docs](https://audon.ai/docs/action-control/audit)

Free on every plan

No card, nothing to cancel.

Read-only

Nothing is executed and nothing changes in Stripe or Shopify.

Up to 90 days

Stripe or Shopify history, plus agent logs if you have them.

No customer contact data

From Shopify: ids, amounts, statuses and dates, never names or emails.

## Four steps. Read-only from start to finish.

1. 1

   Connect read-only

   Install the Audon app in Stripe or your Shopify store in one click, or paste a Stripe restricted key with read permissions.
2. 2

   Add agent logs

   Optional: upload your agents’ tool calls as JSONL or OpenTelemetry, so money movements can be tied to agent calls.
3. 3

   Run the audit

   Up to 90 days of history are imported and checked by the detectors below.
4. 4

   Read the findings

   Each finding is flagged, a suspected loss or a confirmed loss, with the records it came from.

It imports up to 90 days: charges, refunds, coupons and canceled subscriptions (up to 5,000 per type), and customer balance credits for up to 200 customers seen in the period.

## What it finds. Deterministic detectors, the same on every audit.

| Detector | Finds |
| --- | --- |
| duplicate_refund | More than one refund for the same charge or order. |
| refund_exceeds_payment | Refunds above the payment, or on a payment already refunded in full. |
| large_refund large_credit large_discount | Amounts above three times the period’s 95th percentile or your stated threshold; coupons of 50% or more. |
| customer_burst | Three or more money actions for one customer within 24 hours. |
| agent_burst | An agent making at least max(10, 5 × its median) calls in an hour. |
| failed_action | Actions that failed at the provider. |
| repeated_action | The same agent, tool and arguments within 10 minutes. |
| refund_without_intent | With logs: a refund with no matching agent call within 15 minutes. |

**Flagged action**

Worth a look.

**Suspected loss**

Money that likely left in error.

**Confirmed loss**

Duplicate refunds that both succeeded at the provider while the log shows two separate refund calls, or a loss a person confirmed.

## What the audit reads. Read permissions only.

Stripe and Shopify ask for these when you connect for the audit. Write access is only used once you turn on protection for an agent.

**[Stripe](https://audon.ai/integrations/stripe)**

charge_read, payment_intent_read, customer_read, coupon_read, subscription_read, event_read

**[Shopify](https://audon.ai/integrations/shopify)**

read_orders, read_discounts, read_gift_cards, read_customers, read_store_credit_accounts, read_store_credit_account_transactions. Shopify shows the last 60 days of orders unless the app also holds read_all_orders.

## After the audit. Protect the next action before it runs.

Agent Action Control checks every refund, credit, discount or subscription change your agents propose against your rules, executes it through the same connector and verifies the outcome. [How it works](https://audon.ai/product/agent-action-control).

- [Stripe

   Refunds, credits, discounts and subscription changes, checked before they run and verified at Stripe.

   How it works](https://audon.ai/integrations/stripe)
- [Shopify

   Refunds, cancellations, discount codes and store credit, checked before they run.

   How it works](https://audon.ai/integrations/shopify)
- [Webhook

   Your endpoint executes: signed requests, idempotency keys and a status endpoint for unclear outcomes.

   How it works](https://audon.ai/integrations/webhook)

## Questions before you connect Stripe or Shopify.

**What is the free action audit?**

A read-only check of what your AI agents and your team have already done with money in Stripe or Shopify: duplicate refunds, refunds above the payment, unusually large credits and discounts, bursts and failed actions. It is the free way into Agent Action Control.

**Can the audit change anything?**

No. The connector starts read-only and Audon never sends a write with a read-only connector. Protection for live actions is a separate switch a signed-in person turns on later; there is no second install.

**Do I need agent logs?**

No. Without logs the audit checks the Stripe or Shopify history alone. With logs (JSONL, one tool call per line, or OpenTelemetry spans with gen_ai.tool.name) it can also tie refunds to agent calls and find refunds with no matching call.

**What happens to the logs I upload?**

Audon doesn’t store the file. It keeps one row per business tool call (time, agent, tool, action type, ids, amount, status and a hash of the arguments, never the arguments or message text) and deletes those rows 7, 30 or 90 days after the audit, as you set; 30 by default.

**Does the audit count as prevented loss?**

No. The audit finds losses that already happened. They can be recovered, but they are never counted as prevented. Prevention starts when live actions run through Audon.

Last updated 2 November 2026

## See what already went wrong. Read-only, free.

[Start action auditFree](https://audon.ai/sign-up?intent=integrity) [See the spend audit](https://audon.ai/audit)