---
title: "Stripe refund guardrails for AI agents · Audon"
description: "Check every refund, credit, discount and subscription change an AI agent makes in Stripe before it runs, verify the result at Stripe and keep the evidence."
url: https://audon.ai/integrations/stripe
last_updated: 2026-11-02
---
# Stripe refund guardrails for AI agents.

Connect with Stripe installs the Audon app in your Stripe account in one click. It starts read-only for the free action audit. When you turn on protection, the actions your agents propose run through Audon: checked against your rules and fresh Stripe data, executed with an idempotency key, and re-read at Stripe before they count as completed.

[Start action auditFree](https://audon.ai/sign-up?intent=integrity) [About Agent Action Control](https://audon.ai/product/agent-action-control)

## Actions it runs. Each checked by built-in rules before your own policies.

- Create a refund

   refund.create
   - Payment (or Shopify order) exists, is paid and is in the action currency
   - Amount ≤ captured (received) amount − already refunded − refunds in flight
   - Payment is not disputed
   - No refund of the same amount on the same payment or order in the duplicate window
- Issue a customer credit

   credit.create
   - Customer exists and is not deleted
   - Customer balance currency matches
   - No credit of the same amount to the same customer in the duplicate window
- Grant a discount

   discount.create
   - A percent discount states the value at risk as amount
   - No discount of the same amount for the same customer in the duplicate window
- Cancel a subscription

   subscription.cancel
   - Subscription exists and is not already canceled
- Change a subscription

   subscription.update
   - Subscription exists and is active or trialing
   - The change differs from the current state

## Permissions. One install; write access used only after you turn on protection.

**charge_read**

Read payments and refunds for the action audit, the refund checks (refundable balance, disputes) and to verify each refund.

**charge_write**

Create the refunds your agents propose, only after you turn on protection and Audon’s checks allow them.

**payment_intent_read**

Resolve refunds requested by payment intent to their charge.

**customer_read**

Read customers and their balance transactions (credits) for the audit and the credit checks.

**customer_write**

Apply the customer balance credits your agents propose, only after you turn on protection and they are allowed.

**coupon_read**

Read coupons for the audit (unusually large discounts) and verify discounts.

**coupon_write**

Create the single-use coupons your agents propose, only after you turn on protection and they are allowed.

**subscription_read**

Check a subscription’s state before a cancellation or change.

**subscription_write**

Cancel or change subscriptions (and apply coupons), only after you turn on protection and they are allowed.

**event_read**

Receive install and uninstall events for this app.

[Full reference in the docs](https://audon.ai/docs/action-control/connectors#stripe)

## Good to know.

- A restricted key (rk_live_… or rk_test_…) with the same permissions works too. A secret key (sk_…) is refused.
- Audon never sends a write with a read-only connector, whatever the app’s permissions.
- Uninstalling the app in Stripe disconnects it in Audon.

## Questions about Stripe.

**Which actions can AI agents run in Stripe through Audon?**

Create a refund, issue a customer credit, grant a discount, cancel a subscription and change a subscription. Each is checked against built-in business rules and your own policies before it runs.

**Can Audon change anything in Stripe as soon as I connect?**

No. A new connection starts read-only, for the free action audit, and Audon never sends a write with a read-only connector. A signed-in person turns on protection later; there is no second install.

**What happens when the outcome is unclear?**

The action is Unknown and is never retried blindly. Audon looks it up at the provider first, starting after 30 seconds and backing off, and only allows a retry once the outcome is known.

**What else do I have to change?**

Remove the agent’s direct access to the same API (for example a Stripe secret key in its environment), or it can bypass the checks.

Last updated 2 November 2026

## Other integrations.

- [Shopify

   Refunds, cancellations, discount codes and store credit, checked before they run.

   How it works](https://audon.ai/integrations/shopify)
- [Webhook

   Your endpoint executes: signed requests, idempotency keys and a status endpoint for unclear outcomes.

   How it works](https://audon.ai/integrations/webhook)

## Every action checked. Every outcome on record.

[Start action auditFree](https://audon.ai/sign-up?intent=integrity) [See a sample report](https://audon.ai/sample-report)