Action Integrity

Action Gateway (MCP)

Give an agent its business actions as MCP tools through the managed Action Gateway, with an agent key.

The Action Gateway is a managed MCP endpoint for your agents’ business actions. Each action the agent may run, and an execute-mode connector supports, becomes a tool; every tool call goes through the same pipeline as integrity.execute. Agents need no SDK and no code change beyond their MCP configuration.

Action Gateway endpoint

https://audon.ai/mcp/actions

Before: agent → payment API. After: agent → Action Gateway → payment API.

Authentication

Agent keys only: Authorization: Bearer aa_agent_…. The key decides which agent is calling and which tools it sees. Any other credential (an API key, an OAuth token) gets 401 or 403. Create the key under Agents in the app; see the quickstart.

Configure your agent

jsonMCP client configuration (Streamable HTTP)

{
  "mcpServers": {
    "audon-actions": {
      "url": "https://audon.ai/mcp/actions",
      "headers": { "Authorization": "Bearer ${AUDON_AGENT_KEY}" }
    }
  }
}

Configuration formats differ between MCP clients; the URL and the bearer header are what matter.

Tools

Tool	Action
`refund_create`	`refund.create`
`credit_create`	`credit.create`
`discount_create`	`discount.create`
`subscription_cancel`	`subscription.cancel`
`subscription_update`	`subscription.update`
`order_cancel`	`order.cancel` (Webhook connector)
`action_status`	The current decision and outcome of one of this agent’s actions
`action_retry`	The next attempt, only when `retry_safe`

Each action tool takes the same fields as the API (resource, amount, currency, idempotency_key, params, …). The result carries the decision, the reason, the outcome and what to do next.

Security prerequisite: remove the direct path

Tools must actually run through the gateway. Remove the agent’s own credentials for the same systems (for example a Stripe secret key in its tool configuration), or it can bypass the controls. The gateway and every connector response repeat this note.

Action Gateway and the Audon MCP server

Action Gateway (/mcp/actions): agents execute business actions, with agent keys.
Audon MCP server (/mcp): people’s agents use the Audon product itself (audits, findings, policies), with OAuth. See MCP server.