Stripe refund guardrails for AI agents.
Connect with Stripe installs the Audon app in your Stripe account in one click. It starts read-only for the free action audit. When you turn on protection, the actions your agents propose run through Audon: checked against your rules and fresh Stripe data, executed with an idempotency key, and re-read at Stripe before they count as completed.
Actions it runs. Each checked by built-in rules before your own policies.
Create a refund
refund.create
- Payment (or Shopify order) exists, is paid and is in the action currency
- Amount ≤ captured (received) amount − already refunded − refunds in flight
- Payment is not disputed
- No refund of the same amount on the same payment or order in the duplicate window
Issue a customer credit
credit.create
- Customer exists and is not deleted
- Customer balance currency matches
- No credit of the same amount to the same customer in the duplicate window
Grant a discount
discount.create
- A percent discount states the value at risk as amount
- No discount of the same amount for the same customer in the duplicate window
Cancel a subscription
subscription.cancel
- Subscription exists and is not already canceled
Change a subscription
subscription.update
- Subscription exists and is active or trialing
- The change differs from the current state
Permissions. One install; write access used only after you turn on protection.
- charge_read
- Read payments and refunds for the action audit, the refund checks (refundable balance, disputes) and to verify each refund.
- charge_write
- Create the refunds your agents propose, only after you turn on protection and Audon’s checks allow them.
- payment_intent_read
- Resolve refunds requested by payment intent to their charge.
- customer_read
- Read customers and their balance transactions (credits) for the audit and the credit checks.
- customer_write
- Apply the customer balance credits your agents propose, only after you turn on protection and they are allowed.
- coupon_read
- Read coupons for the audit (unusually large discounts) and verify discounts.
- coupon_write
- Create the single-use coupons your agents propose, only after you turn on protection and they are allowed.
- subscription_read
- Check a subscription’s state before a cancellation or change.
- subscription_write
- Cancel or change subscriptions (and apply coupons), only after you turn on protection and they are allowed.
- event_read
- Receive install and uninstall events for this app.
Good to know.
- A restricted key (rk_live_… or rk_test_…) with the same permissions works too. A secret key (sk_…) is refused.
- Audon never sends a write with a read-only connector, whatever the app’s permissions.
- Uninstalling the app in Stripe disconnects it in Audon.
Questions about Stripe.
Which actions can AI agents run in Stripe through Audon?
Create a refund, issue a customer credit, grant a discount, cancel a subscription and change a subscription. Each is checked against built-in business rules and your own policies before it runs.
Can Audon change anything in Stripe as soon as I connect?
No. A new connection starts read-only, for the free action audit, and Audon never sends a write with a read-only connector. A signed-in person turns on protection later; there is no second install.
What happens when the outcome is unclear?
The action is Unknown and is never retried blindly. Audon looks it up at the provider first, starting after 30 seconds and backing off, and only allows a retry once the outcome is known.
What else do I have to change?
Remove the agent’s direct access to the same API (for example a Stripe secret key in its environment), or it can bypass the checks.
Last updated