Stripe
Pending authInstalledCommerce · Stripe, Inc. · v2.0.0 · manifest schema 1.0
The payments connector, the fourth with a full runtime, and the one with the tightest constraint: it requires configuration before it will connect, because a payments integration that silently picked a default account would be the single most dangerous default in the estate. `constraints.requiresConfig` makes the shared lifecycle enforce that without any Stripe-specific code. Money, subscriptions, invoices and the operator's own balance reach the platform through here and through nothing else — the Executive Team reads recurring revenue, the Workflow Engine raises an invoice from a completed workflow, and neither holds a Stripe client. It authenticates with a key rather than a redirect because it acts as the operator's own account, which is also why WHICH account, and whether that account moves real money, are the two settings that matter most on it.
- Last sync
- 2h ago
- Health
- 46/100
- Rate ceiling
- 100/min
- Webhooks
- supported
Add to the estate and begin the authentication handshake. Every operation is a state transition inside AI-EOS — no external service is contacted.
Provider Runtime
45/45 servedServes forty-five payment, subscription, invoice and treasury capabilities. Validates the account, the environment and the key mode; enforces the operator's resource narrowing per operation; counts what the account holds; and declares twenty topics onto the existing bus.
- Read payments
payment.readSettled and pending charges with their intent, status and the fee deducted.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Read subscriptions
subscription.readRecurring agreements with their status, current period and collection method.
Reads:accountIdenvironmenttimezoneRaises: nothing - Create invoice
invoice.writeRaises a draft. Nothing is owed until it is finalised.
Reads:accountIdenvironmentcurrencytimezoneRaises:stripe.invoice.created - Read customers
payer.readLists billing entities with their contact details, balance and default payment method.
Reads:accountIdenvironmentenabledResourcesRaises: nothing - Write customer
payer.writeCreates a billing entity, or amends one that exists. Holds no instrument by itself.
Reads:accountIdenvironmentcurrencyRaises:stripe.customer.createdstripe.customer.updated - Archive customer
payer.archiveRetires a billing entity. Payment history and closed-period figures are retained.
Reads:accountIdenvironmentRaises:stripe.customer.updated - Read payment methods
paymentmethod.readInstruments on file, by type and by the customer they are attached to.
Reads:accountIdenvironmentenabledResourcesRaises: nothing - Attach payment method
paymentmethod.attachBinds an already-tokenised instrument to a billing entity. No instrument details cross this boundary.
Reads:accountIdenvironmentRaises:stripe.customer.updated - Detach payment method
paymentmethod.detachRemoves an instrument, and says what was collecting against it.
Reads:accountIdenvironmentRaises:stripe.customer.updated - Create payment
payment.createRaises a payment intent, and attempts the charge in the same request only when asked to.
Reads:accountIdenvironmentcurrencyRaises:stripe.payment.createdstripe.payment.succeededstripe.payment.failed - Cancel payment
payment.cancelCancels an intent that has not captured. Nothing had moved, so nothing is returned.
Reads:accountIdenvironmentcurrencyRaises: nothing - Create payment link
paymentlink.writeCreates a reusable hosted URL. Collects nothing until somebody follows it.
Reads:accountIdenvironmentcurrencyRaises: nothing - Create checkout session
checkout.writeCreates a single-use hosted checkout that expires. One attempt, one payer.
Reads:accountIdenvironmentcurrencyRaises: nothing - Read checkout sessions
checkout.readHosted checkouts and whether each completed, expired or was abandoned.
Reads:accountIdenvironmentcurrencyRaises: nothing - Read refunds
refund.readRefunds against settled charges, whole and partial, with their stated reason.
Reads:accountIdenvironmentcurrencyRaises: nothing - Refund payment
refund.writeReturns a settled charge to the payer, whole or in part. The processing fee is not returned.
Reads:accountIdenvironmentcurrencyRaises:stripe.payment.refundedstripe.balance.updated - Read invoices
invoice.readInvoices in every state, with their totals, due dates and amount outstanding.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Finalise invoice
invoice.finaliseCloses a draft for edits and makes it payable. The step that turns a description into a debt.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Send invoice
invoice.sendDelivers a finalised invoice. Does not collect — the payer follows the link.
Reads:accountIdenvironmentcurrencyRaises: nothing - Pay invoice
invoice.payCharges the default payment method against an open invoice, and reports whether it collected.
Reads:accountIdenvironmentcurrencyretryLimitRaises:stripe.invoice.paidstripe.invoice.failedstripe.payment.succeededstripe.payment.failed - Void invoice
invoice.voidCancels an unpaid debt and retains the record. Deletion is not offered.
Reads:accountIdenvironmentcurrencyRaises: nothing - Write subscription
subscription.writeCreates a recurring agreement, or amends one and prorates the difference.
Reads:accountIdenvironmentcurrencytimezoneRaises:stripe.subscription.createdstripe.subscription.updated - Cancel subscription
subscription.cancelEnds a recurring agreement now or at period end, and states the recurring revenue lost.
Reads:accountIdenvironmentcurrencytimezoneRaises:stripe.subscription.cancelled - Pause or resume subscription
subscription.pauseSuspends and resumes collection. One field, both directions — a pause is not churn.
Reads:accountIdenvironmentcurrencyRaises:stripe.subscription.updated - Read subscription items
subscriptionitem.readThe priced lines subscriptions are composed of, with quantities.
Reads:accountIdenvironmentenabledResourcesRaises: nothing - Write subscription item
subscriptionitem.writeAdds or requantifies a priced line, and prorates against the current period.
Reads:accountIdenvironmentcurrencyRaises:stripe.subscription.updated - Read products
billingproduct.readBillable products with their active state and default price.
Reads:accountIdenvironmentenabledResourcesRaises: nothing - Write product
billingproduct.writeCreates or updates a billable product. It cannot be sold until a price is attached.
Reads:accountIdenvironmentRaises: nothing - Archive product
billingproduct.archiveStops new sales. Existing subscriptions keep collecting and must be ended separately.
Reads:accountIdenvironmentRaises: nothing - Read prices
price.readPrices attached to products, with their interval, tiers and currency.
Reads:accountIdenvironmentcurrencyRaises: nothing - Write price
price.writeAttaches a new price. Prices are immutable, so this adds rather than replaces.
Reads:accountIdenvironmentcurrencyRaises: nothing - Create coupon
coupon.writeCreates the discount rule. Not customer-facing until a promotion code wraps it.
Reads:accountIdenvironmentcurrencyRaises: nothing - Create promotion code
promotioncode.writeCreates the customer-facing code that applies an existing coupon.
Reads:accountIdenvironmentRaises: nothing - Read disputes
dispute.readChargebacks with their reason, evidence deadline and current status.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Respond to dispute
dispute.writeFiles evidence contesting a chargeback. The amount is already withheld either way.
Reads:accountIdenvironmentcurrencytimezoneRaises:stripe.dispute.updated - Read payouts
payout.readTransfers from the account balance to a bank account, with arrival dates.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Create payout
payout.writeMoves settled funds from the account balance to the bank account on file.
Reads:accountIdenvironmentcurrencyRaises:stripe.payout.createdstripe.payout.failedstripe.balance.updated - Read balance
balance.readAvailable, pending and reserved funds held on the operator's behalf, per currency.
Reads:accountIdenvironmentcurrencyRaises: nothing - Read balance transactions
balancetransaction.readEvery movement into and out of the balance, with the fee attributed to each.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Read connected accounts
connectedaccount.readAccounts this platform acts on behalf of, with their onboarding and payout state.
Reads:accountIdenvironmentappTypeRaises: nothing - Write connected account
connectedaccount.writeOnboards or updates an account this platform acts for. Verification is the account holder's.
Reads:accountIdenvironmentappTypeRaises: nothing - Read usage records
usagerecord.readMetered consumption already reported against subscription items this period.
Reads:accountIdenvironmenttimezoneRaises: nothing - Report usage
usagerecord.writeFiles metered consumption against a priced line. Charged on the next invoice, not now.
Reads:accountIdenvironmentcurrencytimezoneRaises: nothing - Read tax rates
tax.readDeclared tax rates and the jurisdictions and treatments they apply to.
Reads:accountIdenvironmentenabledResourcesRaises: nothing - Write tax rate
taxrate.writeDeclares a rate. Does not resolve which jurisdiction applies to a sale.
Reads:accountIdenvironmentRaises: nothing
- Accountblocking
No account is set. Every operation acts as a specific Stripe account, so nothing can be dispatched until one is supplied.
- Environmentblocking
No environment is set. This field decides whether operations move real money, and it is never defaulted — assuming test would present live figures as a rehearsal, and assuming live would apply every safeguard to nothing while the real account went untouched. Set it to one of: test, live.
- Key modeadvisory
Standard secret key. Operations resolve against the account API.
- Reporting currencyadvisory
No reporting currency is set, so every monetary figure this connector produces is annotated (currency unset) rather than formatted. Operations still run; the figures are incomplete rather than wrong.
- Timezoneblocking
Daily revenue is attributed against UTC.
- Sync frequencyblocking
Reconciles every 15m.
- Retry limitblocking
3 attempts before an operation lands in the error queue.
- Enabled resourcesblocking
Not narrowed, so every resource the grant covers is reachable.
- Credentialadvisory
The credential is pending. This connector declares that it requires configuration, so the Auth Manager reports pending until configuration is supplied — the fields above are that configuration.
A blocking failure stops the runtime dispatching and costs health points. The plugin states the fact; the Health Monitor prices it, alongside every other penalty.
- appType
- standard-key Provider default — the operator has set no value.
- timezone
- UTC Provider default — the operator has set no value.
- syncFrequency
- 15m Provider default — the operator has set no value.
- retryLimit
- 3 Provider default — the operator has set no value.
Operator values over provider defaults. A blank field takes the default, which is declared by the plugin and printed here rather than hidden inside an operation.
Inventory
derivedWhat this connection holds on the far side, counted by the connector's own runtime — the Hub does not know what a repository is and does not learn. Figures are derived from the configured scope, not measured; narrowing the selection narrows them.
Platform Surface
declaredWhat this connector offers the other modules. Every line is a declaration — nothing below is projected, charted or executed yet. Each consuming module builds against the declaration when it is ready to, which is what lets a connector extend six modules without any of them naming it.
Inbound deliveries and outbound operations both raise these onto the internal bus. The Hub is the emitter — an external platform cannot reach the bus, which is what stops it raising arbitrary internal events.
- Customer Created
stripe.customer.createdA billing entity was created. Not a storefront shopper — this is something an invoice can be raised against.
- Customer Updated
stripe.customer.updatedA billing entity changed. Also raised when one is archived or when an instrument is attached or detached, because all three amend the same record.
- Payment Created
stripe.payment.createdA payment intent exists. NOT money — an intent may never be confirmed, and revenue is not entitled to move on this.
- Payment Succeeded
stripe.payment.succeededA charge settled. This is the topic revenue moves on, and the reason it is separate from the one above.
- Payment Failed
stripe.payment.failedA charge was declined. Distinct from an invoice failure: this is a checkout problem, that one is dunning.
- Payment Refunded
stripe.payment.refundedMoney was returned to a payer. Negative revenue — a report that added it would count a return as a sale.
- Checkout Completed
stripe.checkout.completedA hosted checkout was paid. Arrives from the far side; no operation here raises it, because creating a session is an invitation and not a transaction.
- Subscription Created
stripe.subscription.createdA recurring agreement began. Recurring revenue moves on this; the first collection is a separate payment event.
- Subscription Updated
stripe.subscription.updatedAn agreement was amended, paused or resumed. A pause raises this and never the cancellation below — a paused subscription is not churn.
- Subscription Cancelled
stripe.subscription.cancelledAn agreement ended, immediately or at period end. This is the topic a churn figure counts.
- Invoice Created
stripe.invoice.createdA draft invoice exists. Nothing is owed yet — finalising is what turns a description into a debt.
- Invoice Paid
stripe.invoice.paidAn invoice collected. A receivable became money, which is two facts and not one.
- Invoice Payment Failed
stripe.invoice.failedA recurring collection failed and the invoice stays open. This is where dunning begins, and it is the highest-value subscriber hook on this connector.
- Dispute Created
stripe.dispute.createdA chargeback was raised by an issuing bank. Arrives from the far side — no operation here creates one, and one that claimed to would attribute a customer's action to the operator.
- Dispute Updated
stripe.dispute.updatedEvidence was filed or a decision landed. The disputed amount is withheld from the moment the dispute opens, not from this.
- Payout Created
stripe.payout.createdSettled funds left the balance for a bank account. The operator's own money moving, not a customer's.
- Payout Failed
stripe.payout.failedA transfer was rejected and the funds returned to the balance. A treasury incident rather than a customer one.
- Balance Updated
stripe.balance.updatedAvailable funds changed. Raised by refunds as well as payouts — a treasury view hearing only about payouts would drift by the refund total.
- Webhook Received
stripe.webhook.receivedAn inbound delivery arrived and verified. Raised before it is interpreted, so an unrecognised payload is still visible.
- Sync Completed
stripe.sync.completedA scheduled reconciliation finished. Declared and raised by nothing here — reconciliation is a schedule, and this runtime resolves calls rather than running schedules.
Routed by the event bus alongside the platform's own topics. See the fan-out chains.
What a future workflow step can request. Several share one capability — the capability is what the gateway routes on, the action is what an operator building a workflow recognises.
- Create Customer
payer.writeCreates a billing entity. The step a completed company.created fan-out resolves to — a new company acquires somewhere to be billed, not an invoice.
- Update Customer
payer.writeAmends contact details or metadata on an existing billing entity. Same capability, different payload.
- Attach Payment Method
paymentmethod.attachBinds an already-tokenised instrument. The tokenisation happens in the vendor's hosted field and never in a workflow.
- Create Payment
payment.createMOVES MONEY. Raises a charge for a stated amount. A step wanting a customer to pay at their own pace wants a payment link instead.
- Refund Payment
refund.writeMOVES MONEY, outward. The processing fee is not returned, so a fully refunded payment leaves the operator down the fee rather than square.
- Create Payment Link
paymentlink.writeA reusable URL. Collects nothing until somebody follows it, so the step completes without money having moved.
- Create Checkout Session
checkout.writeSingle-use and expiring, unlike a payment link. A step creating one per customer and one creating a link per campaign are both correct and are not interchangeable.
- Create Invoice
invoice.writeThe step a completed workflow resolves to. Raises a draft — nothing is owed until it is finalised.
- Finalise Invoice
invoice.finaliseTurns a description into a debt. Separate from creation precisely so an approval gate has somewhere to stand.
- Send Invoice
invoice.sendDelivers a finalised invoice. Does not collect — the payer follows the link at their own pace.
- Collect Invoice
invoice.payMOVES MONEY. Charges the method on file against an open invoice, and reports whether dunning begins.
- Create Subscription
subscription.writeBegins a recurring agreement. Every later collection follows from this one step, which is why it is worth a review gate even though it collects nothing itself.
- Cancel Subscription
subscription.cancelEnds an agreement now or at period end. Counted as churn either way.
- Pause Subscription
subscription.pauseSuspends collection without ending the agreement. Not churn, and a metric that counted it as such would understate retention.
- Resume Subscription
subscription.pauseThe same capability in the other direction — on this platform both are one write to one field. See the plugin's operations header.
- Publish Product and Price
price.writeAttaches a price to a billable product, making it sellable. Prices are immutable, so a price change is a new price rather than an edit.
Node kinds this connector would project. External entities enter the graph on exactly the terms internal ones do — the graph owns neither, and no database change is implied by any of it.
- Customerroot node
payer.readA root. A billing entity may appear under several Stripe accounts on a multi-account estate and is still one entity.
- Productroot node
billingproduct.readA root, and DISTINCT from a storefront product even where an enterprise sells the same thing through both. One is merchandised, the other is billed.
- Pricechild of billing-product
price.readA child. Prices are immutable, so a product accumulates them — a graph showing one price per product would show the wrong one for most subscriptions.
- Paymentroot node
payment.readA root. It references a payer and a product and belongs to neither — it is the event that connects them.
- Refundchild of payment
refund.readA child. A refund cannot exist without the charge it reverses, and is a fact about that charge rather than about the customer.
- Disputechild of payment
dispute.readA child, for the same reason. Raised by an issuing bank rather than by either party in the graph.
- Invoicechild of payer
invoice.readA child. An invoice is always raised against one billing entity, and an unpaid one is a receivable rather than a payment.
- Subscriptionchild of payer
subscription.readA child. The agreement that generates invoices, which is why it hangs from the payer and not from the invoices it produces.
- Payoutroot node
payout.readA root, and the operator's rather than a customer's. Hanging it under a payer would put the operator's treasury inside somebody's account record.
- Connected Accountroot node
connectedaccount.readA root. An account this platform acts for is a party in its own right, not a property of the platform that onboarded it.
Advisory reads this connector's data would support. The Decision Engine sees one instant and stores no history, so each insight states whether it is instantaneous or needs a series.
- Revenue
payment.read · refund.readInstantaneous. Settled charges less refunds. Both reads are required — revenue net of nothing is gross receipts, which is a different and larger number.
- Recurring Revenue
subscription.read · subscriptionitem.read · price.readInstantaneous, and the one figure here that is a projection rather than a measurement — it states what would be collected if nothing changed, which is never quite true.
- Subscription Growth
subscription.readNeeds a series. A count of active agreements at one instant says nothing about direction, and direction is the whole question.
- Churn
subscription.read · subscriptionitem.readNeeds a series. Cancellations over a period against the base at its start. A paused agreement must be excluded — counting it would report churn that reverses itself.
- Failed Payments
payment.read · invoice.readInstantaneous. Both reads, because a declined checkout and a failed recurring collection are different problems needing different work.
- Refund Rate
refund.read · payment.readNeeds a series to be useful. The instantaneous ratio is computable and nearly meaningless — a refund is usually issued in a later period than the charge it reverses.
- Customer Lifetime Value
payer.read · payment.read · subscription.readNeeds a series, and a long one. The measured half is what a customer has paid; the projected half needs a churn rate, which itself needs history.
- Average Transaction Value
payment.readInstantaneous. Settled charges over their count. Refunds are excluded deliberately — netting them in would report an average nobody was ever charged.
- Outstanding Invoices
invoice.readInstantaneous. Finalised and uncollected. This is a receivable, and an alert reading it as revenue would report money the operator does not have.
- Payment Failure Rate
payment.read · invoice.readNeeds a series. A rate that moved is the signal; a rate that is merely high may be the account's normal, and an alert on the level alone would fire forever.
- Payout Health
payout.read · balance.read · balancetransaction.readNeeds a series. A single failed payout is an incident; repeated ones are a bank detail problem, and only the second is worth waking somebody for.
- Dispute Rate
dispute.read · payment.readNeeds a series, and it is the one insight here with a hard external consequence — card networks impose monitoring above a threshold, so the trend crossing it matters more than the count.
- Revenue Trend
payment.read · refund.read · balancetransaction.readNeeds a series, by definition. Included rather than omitted so a future rule author can see the shape it will read when history exists.
Figures this connector would publish to the Intelligence Center. Each names the capability that supplies it, so a metric cannot be charted for a grant that does not cover the read behind it.
- Total Revenuecurrency
payment.readSettled charges. Follows payment.succeeded rather than payment.created — an unconfirmed intent is not revenue.
- Paymentspayments
payment.readCount of settled charges. Beside the revenue figure rather than instead of it — the two move independently and a change in either alone is the interesting case.
- Refundscurrency
refund.readNEGATIVE REVENUE. Subtracted from the revenue figure, never added to it. The processing fee is not returned, so a full refund costs more than the charge earned.
- Subscriptionssubscriptions
subscription.readActive agreements, including paused ones. A pause is a suspension and not an ending, and excluding them would report churn that has not happened.
- Active Customerscustomers
payer.readBilling entities with a payment or an active agreement. Not the same population as a storefront's customers, and the two must not be added together.
- Failed Paymentspayments
payment.readDeclined charges. A rising count against flat revenue is the earliest visible sign of an expiring card estate.
- Outstanding Invoicescurrency
invoice.readRECEIVABLE, not revenue. Finalised and uncollected, some of which will be voided. Adding it to revenue would book money that may never arrive.
- Payoutscurrency
payout.readFunds moved to the bank. A TRANSFER rather than a gain — the money was already the operator's, and counting it as income would count every payment twice.
- Disputesdisputes
dispute.readOpen chargebacks. The count matters more than the amount, because card networks monitor the RATE and impose programmes above a threshold.
- Recurring Revenuecurrency
subscription.readA projection of what would be collected if nothing changed. Beside total revenue and never summed with it — the same money appears in both.
- Churn% of subscriptions
subscription.readNeeds a series the Intelligence Center does not store yet. Declared so the tile has a defined meaning when it does, rather than acquiring one later.
- Payment Success Rate% of attempts
payment.readSettled attempts over all attempts. Distinct from the connector's own health score: one measures whether customers can pay, the other whether the Hub can reach Stripe.
Shapes of agent this connector was built for, and the capabilities each requests. Never a connector key — an agent that could name a connector could import one, and the Fleet's isolation would be a convention rather than a structure.
- Finance Agent
payment.read · refund.read · refund.write · balance.read · balancetransaction.read · payout.read · invoice.readThe one archetype trusted to return money. Reads treasury and issues refunds; cannot create a payout, because moving the balance is a decision above an agent.
- Billing Agent
invoice.read · invoice.write · invoice.finalise · invoice.send · invoice.pay · payer.read · paymentmethod.readRuns the invoice lifecycle end to end, including collection. Cannot refund — issuing money back is Finance's, behind a review gate.
- Revenue Agent
payment.read · subscription.read · subscriptionitem.read · billingproduct.read · price.read · price.write · coupon.writePrices and packages. Writes prices and coupons and touches no payment — the closest it comes to money is deciding what something costs.
- Sales Agent
payer.read · payer.write · paymentlink.write · checkout.write · checkout.read · promotioncode.write · price.readCreates customers and ways for them to pay. Cannot cancel an agreement or refund — both are retention and finance decisions rather than sales ones.
- Customer Success Agent
payer.read · payment.read · subscription.read · subscription.pause · invoice.read · paymentmethod.readSees the whole customer and can pause an agreement to defuse a cancellation. DELIBERATELY CANNOT REFUND — a support conversation is the commonest route to an unreviewed refund.
- Subscription Manager
subscription.read · subscription.write · subscription.cancel · subscription.pause · subscriptionitem.read · subscriptionitem.write · usagerecord.read · usagerecord.writeOwns the agreement lifecycle and metered usage. Cannot refund and cannot invoice ad hoc — it changes what recurs, not what has already been charged.
- Accounts Receivable Agent
invoice.read · invoice.send · invoice.pay · invoice.void · payer.readChases and collects. Can void a debt and cannot refund one — writing off what was never paid and returning what was are different acts with different approvals.
- CFO Agent
balance.read · balancetransaction.read · payout.read · dispute.read · payment.read · invoice.read · connectedaccount.read · tax.readReads treasury and writes nothing. Not redundant with Analytics: this one sees balance, payouts and disputes, which is the operator's own position rather than customer behaviour.
- Analytics Agent
payment.read · refund.read · subscription.read · subscriptionitem.read · payer.read · invoice.read · checkout.read · usagerecord.readEight reads, zero writes, read-only by construction. An analytics agent that could write is an analytics agent that can restate the thing it is measuring.
Archetypes, not roster entries. The Agent Fleet's own registry is unchanged by this connector existing.
Health
46/10046/100 — Handshake incomplete — the connector is installed but not yet authorised. 1 further penalty applied.
- −30CredentialHandshake incomplete — the connector is installed but not yet authorised.
- −24Provider configurationNo account is set. Every operation acts as a specific Stripe account, so nothing can be dispatched until one is supplied. No environment is set. This field decides whether operations move real money, and it is never defaulted — assuming test would present live figures as a rehearsal, and assuming live would apply every safeguard to nothing while the real account went untouched. Set it to one of: test, live.
Authentication
Pending- Method
- API Key
- Credential
- —
- Last verified
- never
- Principal
- —
- Expires
- Does not expire
- Scopes held
- 0/35
customers:readcustomers:writepayment_methods:readpayment_methods:writecharges:readpayment_intents:readpayment_intents:writerefunds:readrefunds:writepayment_links:writecheckout_sessions:readcheckout_sessions:writeinvoices:readinvoices:writesubscriptions:readsubscriptions:writeproducts:readproducts:writeprices:readprices:writecoupons:readcoupons:writepromotion_codes:writedisputes:readdisputes:writepayouts:readpayouts:writebalance:readbalance_transactions:readconnected_accounts:readconnected_accounts:writeusage_records:readusage_records:writetax_rates:readtax_rates:write
- OAuth 2.0720h
Operator authorises on the provider's site; the Hub stores a refresh reference.
- Bearer Token24h
A short-lived token presented per request. Refreshed by the Auth Manager.
Prepared, not selectable yet. The Auth Manager derives this connector's state from the method currently in force; switching would be a lifecycle operation, and the handshake below would be rebuilt from the new method's row with no code changing.
- 1.InitiateThe Hub prepares a API Key request for Stripe, Inc..
- 2.Supply api keyEntered once. Held by reference — the Hub stores no credential material.
- 3.VerifyThe Hub performs one authenticated read to confirm the grant, then records the reference.
Nothing is contacted. The Hub stores no credential material — only a masked reference, the granted scopes and an expiry. There is no field on the auth record a secret could go in, which is a stronger guarantee than a policy of not putting one there.
Capabilities45
- Read payments
payment.readPull charge and payout history for reporting.
- Read subscriptions
subscription.readTrack recurring revenue per company.
- Issue invoices
invoice.writeRaise an invoice from a completed workflow.
- Read customers
payer.readBilling entities, not storefront shoppers — see the note above.
- Write customers
payer.writeCreate or update a billing entity and its contact details.
- Archive customer
payer.archiveSoft-deletes a billing entity, keeping its payment history.
- Read payment methods
paymentmethod.readWhich instruments a billing entity has on file.
- Attach payment method
paymentmethod.attachBinds an already-tokenised instrument to a customer.
- Detach payment method
paymentmethod.detachRemoves an instrument without deleting the customer.
- Create payment
payment.createRaises a payment intent for a stated amount and currency.
- Cancel payment
payment.cancelCancels an intent that has not yet captured.
- Create payment link
paymentlink.writeA reusable hosted URL that collects a payment.
- Create checkout session
checkout.writeA single hosted checkout for one customer.
- Read checkout session
checkout.readWhether a hosted checkout was completed, and for what.
- Read refunds
refund.readRefund history against settled charges.
- Refund payment
refund.writeReturns money to the payer, in full or in part.
- Read invoices
invoice.readInvoice state, totals and outstanding balance.
- Finalise invoice
invoice.finaliseCloses a draft for edits and makes it payable.
- Send invoice
invoice.sendDelivers a finalised invoice to the billing entity.
- Pay invoice
invoice.payCharges a payment method against an open invoice.
- Void invoice
invoice.voidCancels an unpaid invoice without deleting the record.
- Write subscriptions
subscription.writeCreate or amend a recurring agreement.
- Cancel subscription
subscription.cancelEnds a recurring agreement, now or at period end.
- Pause subscription
subscription.pauseSuspends and resumes collection — one field, both directions.
- Read subscription items
subscriptionitem.readThe priced lines a subscription is composed of.
- Write subscription items
subscriptionitem.writeAdds, removes or requantifies a line on a subscription.
- Read products
billingproduct.readBillable products, not merchandisable ones — see the note above.
- Write products
billingproduct.writeCreate or update a billable product.
- Archive product
billingproduct.archiveRetires a product without breaking existing subscriptions.
- Read prices
price.readThe amounts and intervals a product may be sold at.
- Write prices
price.writeAdds a price to a product. Existing prices are immutable.
- Create coupon
coupon.writeA reusable discount rule, by amount or percentage.
- Create promotion code
promotioncode.writeA customer-facing code that applies a coupon.
- Read disputes
dispute.readChargebacks raised against settled payments.
- Respond to dispute
dispute.writeFiles evidence against a chargeback before its deadline.
- Read payouts
payout.readTransfers from the account balance to a bank account.
- Create payout
payout.writeMoves settled funds out of the account balance.
- Read balance
balance.readAvailable and pending funds held on the operator's behalf.
- Read balance transactions
balancetransaction.readEvery movement into and out of the balance, with fees.
- Read connected accounts
connectedaccount.readThe accounts a platform acts on behalf of.
- Write connected accounts
connectedaccount.writeOnboards or updates an account under a platform.
- Read usage records
usagerecord.readMetered consumption already reported for a period.
- Report usage
usagerecord.writeFiles metered consumption against a subscription item.
- Read tax
tax.readTax rates and the treatment applied to a charge.
- Write tax rate
taxrate.writeDefines a rate invoices and subscriptions may apply.
Modules request capabilities, never connectors. A capability offered by two connectors gives the requesting module a fallback it does not have to know about.
Usage · 24h
Event Subscriptions2
- Workflow Completed
workflow.completedA workflow reached its final stage with every gate cleared.
Raised by workflows · see the fan-out chain
- Company Created
company.createdA new autonomous company workspace was generated.
Raised by companies · see the fan-out chain
Publisher
First party- Name
- AI-EOS
- Publisher ID
- aeos
- Platform vendor
- Stripe, Inc.
- Support
- operations@ai-eos.internal
Published by the platform itself. These manifests ship with the build rather than being fetched.
Stripe, Inc. owns the platform this plugin reaches. AI-EOS authored the manifest.
Version and changelog
Up to date- Installed
- 2.0.0
- Published
- 2.0.0
- Minimum platform
- 1.0.0
- Compatibility
- Compatible
- Manifest schema
- 1.0
- First published
- 13 months ago
Requires platform 1.0.0 or newer. This build is 1.0.0.
- 2.0.0major · 1 month ago
- Added a provider runtime covering charges, subscriptions, invoices and payouts.
- Money derivation refuses rather than guesses when a currency's minor unit is unknown.
- Multi-instance support: a live account beside a test account.
- 1.5.0minor · 5 months ago
- Webhook signature verification over raw bytes, never a re-serialised body.
- 1.0.0major · 13 months ago
- First release. API-key authentication and charge read.
Permissions and scopes
viewer+AI-EOS permissions are what this plugin may do insidethe platform, resolved against the API Gateway’s own table. Scopes are what the external platform is asked to allow. They are different systems and neither substitutes for the other.
- company:read4 roles
Companies, departments, executives and the knowledge graph projection.
- analytics:read4 roles
Enterprise Intelligence read models and the Decision Engine's outputs.
- workflow:read4 roles
Workflows, stages, tasks and approval gates.
- customers:read
- customers:write
- payment_methods:read
- payment_methods:write
- charges:read
- payment_intents:read
- payment_intents:write
- refunds:read
- refunds:write
- payment_links:write
- checkout_sessions:read
- checkout_sessions:write
- invoices:read
- invoices:write
- subscriptions:read
- subscriptions:write
- products:read
- products:write
- prices:read
- prices:write
- coupons:read
- coupons:write
- promotion_codes:write
- disputes:read
- disputes:write
- payouts:read
- payouts:write
- balance:read
- balance_transactions:read
- connected_accounts:read
- connected_accounts:write
- usage_records:read
- usage_records:write
- tax_rates:read
- tax_rates:write
Dependencies0
Declares no dependencies. It can be installed against an empty estate.
Whether each is satisfied is resolved against the live estate at install time, not here.
Security
- Authentication
- API Key
- Credential storage
- Never stored
- External scopes
- 35
- AI-EOS permissions
- 3
- Minimum role
- viewer
- Inbound deliveries
- Signature verified
- Tenant isolation
- Installation state is tenant-scoped
A plugin is a data literal. Nothing in the marketplace executes plugin code, and a plugin cannot bypass the Authentication Manager, the Integration Hub, the API Gateway or a permission check, because it has no code path — the host performs every transition.
The auth state type has no field a credential fits in, so the guarantee is enforced by the type checker rather than by convention.
Privacy
- Data leaving AI-EOS
- 28 capabilities
- Data entering AI-EOS
- 17 capabilities
- Modules served
- 7
- Event topics received
- 2
Direction is declared per capability, so what this plugin can send and what it can receive are both enumerable rather than a matter of trust. It reaches only the modules listed above, and only through capabilities the Integration Hub resolves.
Documentation2
Webhook Manager1
1 active/api/integrations/stripe/eventsactive2,466 in · 1% failed · 3h agoForwards stripe.customer.created, stripe.customer.updated, stripe.payment.created
Logs4
- Authjust nowInstalled, but configuration is required before the handshake can complete.
- Sync1h agoSynchronisation completed — 86,400 records reconciled in 24h.
- Gateway49m ago17,280 gateway calls in 24h at 659ms mean latency.
- Registry5d agoConnector v2.0.0 installed against manifest schema 1.0.
Roadmap
- Revenue as a live Executive Team KPI rather than a placeholder
- Dunning failures raised as Decision Engine alerts
- Connect OAuth served rather than declared, so a platform can act as a connected account
- Idempotency keys, once a server exists to hold them — the retry ceiling is today's only control
- Stripe Tax calculation rather than rate declaration
- A revenue series the Decision Engine can read, which most of its insights need and none has
- Per-company payments scoping rather than one shared account
What this connector would gain next. Mirrors the Future Integrations list every module carries in the Navigator registry.