AEOS
--:--:--

Stripe

Pending authInstalled

Commerce · Stripe, Inc. · v2.0.0 · manifest schema 1.0

The payments connector, the fourth with a full runtime, and the one with the tightest constraint: it requires configuration before it will connect, because a payments integration that silently picked a default account would be the single most dangerous default in the estate. `constraints.requiresConfig` makes the shared lifecycle enforce that without any Stripe-specific code. Money, subscriptions, invoices and the operator's own balance reach the platform through here and through nothing else — the Executive Team reads recurring revenue, the Workflow Engine raises an invoice from a completed workflow, and neither holds a Stripe client. It authenticates with a key rather than a redirect because it acts as the operator's own account, which is also why WHICH account, and whether that account moves real money, are the two settings that matter most on it.

Last sync
2h ago
Health
46/100
Rate ceiling
100/min
Webhooks
supported

Add to the estate and begin the authentication handshake. Every operation is a state transition inside AI-EOS — no external service is contacted.

Provider Runtime

45/45 served

Serves forty-five payment, subscription, invoice and treasury capabilities. Validates the account, the environment and the key mode; enforces the operator's resource narrowing per operation; counts what the account holds; and declares twenty topics onto the existing bus.

v1.0.0
Runtime
plugin version
1.0
Contract
provider schema
45
Operations
45 declared
24
Topics raised
onto the event bus
Capability coverage100% of the manifest
Operations
  • Read paymentspayment.read

    Settled and pending charges with their intent, status and the fee deducted.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Read subscriptionssubscription.read

    Recurring agreements with their status, current period and collection method.

    Reads: accountIdenvironmenttimezoneRaises: nothing
  • Create invoiceinvoice.write

    Raises a draft. Nothing is owed until it is finalised.

    Reads: accountIdenvironmentcurrencytimezoneRaises: stripe.invoice.created
  • Read customerspayer.read

    Lists billing entities with their contact details, balance and default payment method.

    Reads: accountIdenvironmentenabledResourcesRaises: nothing
  • Write customerpayer.write

    Creates a billing entity, or amends one that exists. Holds no instrument by itself.

    Reads: accountIdenvironmentcurrencyRaises: stripe.customer.createdstripe.customer.updated
  • Archive customerpayer.archive

    Retires a billing entity. Payment history and closed-period figures are retained.

    Reads: accountIdenvironmentRaises: stripe.customer.updated
  • Read payment methodspaymentmethod.read

    Instruments on file, by type and by the customer they are attached to.

    Reads: accountIdenvironmentenabledResourcesRaises: nothing
  • Attach payment methodpaymentmethod.attach

    Binds an already-tokenised instrument to a billing entity. No instrument details cross this boundary.

    Reads: accountIdenvironmentRaises: stripe.customer.updated
  • Detach payment methodpaymentmethod.detach

    Removes an instrument, and says what was collecting against it.

    Reads: accountIdenvironmentRaises: stripe.customer.updated
  • Create paymentpayment.create

    Raises a payment intent, and attempts the charge in the same request only when asked to.

    Reads: accountIdenvironmentcurrencyRaises: stripe.payment.createdstripe.payment.succeededstripe.payment.failed
  • Cancel paymentpayment.cancel

    Cancels an intent that has not captured. Nothing had moved, so nothing is returned.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Create payment linkpaymentlink.write

    Creates a reusable hosted URL. Collects nothing until somebody follows it.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Create checkout sessioncheckout.write

    Creates a single-use hosted checkout that expires. One attempt, one payer.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Read checkout sessionscheckout.read

    Hosted checkouts and whether each completed, expired or was abandoned.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Read refundsrefund.read

    Refunds against settled charges, whole and partial, with their stated reason.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Refund paymentrefund.write

    Returns a settled charge to the payer, whole or in part. The processing fee is not returned.

    Reads: accountIdenvironmentcurrencyRaises: stripe.payment.refundedstripe.balance.updated
  • Read invoicesinvoice.read

    Invoices in every state, with their totals, due dates and amount outstanding.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Finalise invoiceinvoice.finalise

    Closes a draft for edits and makes it payable. The step that turns a description into a debt.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Send invoiceinvoice.send

    Delivers a finalised invoice. Does not collect — the payer follows the link.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Pay invoiceinvoice.pay

    Charges the default payment method against an open invoice, and reports whether it collected.

    Reads: accountIdenvironmentcurrencyretryLimitRaises: stripe.invoice.paidstripe.invoice.failedstripe.payment.succeededstripe.payment.failed
  • Void invoiceinvoice.void

    Cancels an unpaid debt and retains the record. Deletion is not offered.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Write subscriptionsubscription.write

    Creates a recurring agreement, or amends one and prorates the difference.

    Reads: accountIdenvironmentcurrencytimezoneRaises: stripe.subscription.createdstripe.subscription.updated
  • Cancel subscriptionsubscription.cancel

    Ends a recurring agreement now or at period end, and states the recurring revenue lost.

    Reads: accountIdenvironmentcurrencytimezoneRaises: stripe.subscription.cancelled
  • Pause or resume subscriptionsubscription.pause

    Suspends and resumes collection. One field, both directions — a pause is not churn.

    Reads: accountIdenvironmentcurrencyRaises: stripe.subscription.updated
  • Read subscription itemssubscriptionitem.read

    The priced lines subscriptions are composed of, with quantities.

    Reads: accountIdenvironmentenabledResourcesRaises: nothing
  • Write subscription itemsubscriptionitem.write

    Adds or requantifies a priced line, and prorates against the current period.

    Reads: accountIdenvironmentcurrencyRaises: stripe.subscription.updated
  • Read productsbillingproduct.read

    Billable products with their active state and default price.

    Reads: accountIdenvironmentenabledResourcesRaises: nothing
  • Write productbillingproduct.write

    Creates or updates a billable product. It cannot be sold until a price is attached.

    Reads: accountIdenvironmentRaises: nothing
  • Archive productbillingproduct.archive

    Stops new sales. Existing subscriptions keep collecting and must be ended separately.

    Reads: accountIdenvironmentRaises: nothing
  • Read pricesprice.read

    Prices attached to products, with their interval, tiers and currency.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Write priceprice.write

    Attaches a new price. Prices are immutable, so this adds rather than replaces.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Create couponcoupon.write

    Creates the discount rule. Not customer-facing until a promotion code wraps it.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Create promotion codepromotioncode.write

    Creates the customer-facing code that applies an existing coupon.

    Reads: accountIdenvironmentRaises: nothing
  • Read disputesdispute.read

    Chargebacks with their reason, evidence deadline and current status.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Respond to disputedispute.write

    Files evidence contesting a chargeback. The amount is already withheld either way.

    Reads: accountIdenvironmentcurrencytimezoneRaises: stripe.dispute.updated
  • Read payoutspayout.read

    Transfers from the account balance to a bank account, with arrival dates.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Create payoutpayout.write

    Moves settled funds from the account balance to the bank account on file.

    Reads: accountIdenvironmentcurrencyRaises: stripe.payout.createdstripe.payout.failedstripe.balance.updated
  • Read balancebalance.read

    Available, pending and reserved funds held on the operator's behalf, per currency.

    Reads: accountIdenvironmentcurrencyRaises: nothing
  • Read balance transactionsbalancetransaction.read

    Every movement into and out of the balance, with the fee attributed to each.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Read connected accountsconnectedaccount.read

    Accounts this platform acts on behalf of, with their onboarding and payout state.

    Reads: accountIdenvironmentappTypeRaises: nothing
  • Write connected accountconnectedaccount.write

    Onboards or updates an account this platform acts for. Verification is the account holder's.

    Reads: accountIdenvironmentappTypeRaises: nothing
  • Read usage recordsusagerecord.read

    Metered consumption already reported against subscription items this period.

    Reads: accountIdenvironmenttimezoneRaises: nothing
  • Report usageusagerecord.write

    Files metered consumption against a priced line. Charged on the next invoice, not now.

    Reads: accountIdenvironmentcurrencytimezoneRaises: nothing
  • Read tax ratestax.read

    Declared tax rates and the jurisdictions and treatments they apply to.

    Reads: accountIdenvironmentenabledResourcesRaises: nothing
  • Write tax ratetaxrate.write

    Declares a rate. Does not resolve which jurisdiction applies to a sale.

    Reads: accountIdenvironmentRaises: nothing
Readiness checks
  • Accountblocking

    No account is set. Every operation acts as a specific Stripe account, so nothing can be dispatched until one is supplied.

  • Environmentblocking

    No environment is set. This field decides whether operations move real money, and it is never defaulted — assuming test would present live figures as a rehearsal, and assuming live would apply every safeguard to nothing while the real account went untouched. Set it to one of: test, live.

  • Key modeadvisory

    Standard secret key. Operations resolve against the account API.

  • Reporting currencyadvisory

    No reporting currency is set, so every monetary figure this connector produces is annotated (currency unset) rather than formatted. Operations still run; the figures are incomplete rather than wrong.

  • Timezoneblocking

    Daily revenue is attributed against UTC.

  • Sync frequencyblocking

    Reconciles every 15m.

  • Retry limitblocking

    3 attempts before an operation lands in the error queue.

  • Enabled resourcesblocking

    Not narrowed, so every resource the grant covers is reachable.

  • Credentialadvisory

    The credential is pending. This connector declares that it requires configuration, so the Auth Manager reports pending until configuration is supplied — the fields above are that configuration.

A blocking failure stops the runtime dispatching and costs health points. The plugin states the fact; the Health Monitor prices it, alongside every other penalty.

Configuration in effect
appType
standard-key
Provider default — the operator has set no value.
timezone
UTC
Provider default — the operator has set no value.
syncFrequency
15m
Provider default — the operator has set no value.
retryLimit
3
Provider default — the operator has set no value.

Operator values over provider defaults. A blank field takes the default, which is declared by the plugin and printed here rather than hidden inside an operation.

Inventory

derived
Customers
No completed handshake — nothing has been read yet.
Active subscriptions
No completed handshake — nothing has been read yet.
Products
No completed handshake — nothing has been read yet.
Prices
No completed handshake — nothing has been read yet.
Payment methods
No completed handshake — nothing has been read yet.
Connected accounts
No completed handshake — nothing has been read yet.
Open disputes
No completed handshake — nothing has been read yet.
Available balance
No completed handshake — nothing has been read yet.
Outstanding invoices
No completed handshake — nothing has been read yet.
Narrowed to
No completed handshake — nothing has been read yet.

What this connection holds on the far side, counted by the connector's own runtime — the Hub does not know what a repository is and does not learn. Figures are derived from the configured scope, not measured; narrowing the selection narrows them.

Platform Surface

declared

What this connector offers the other modules. Every line is a declaration — nothing below is projected, charted or executed yet. Each consuming module builds against the declaration when it is ready to, which is what lets a connector extend six modules without any of them naming it.

Event topics raised20

Inbound deliveries and outbound operations both raise these onto the internal bus. The Hub is the emitter — an external platform cannot reach the bus, which is what stops it raising arbitrary internal events.

  • Customer Createdstripe.customer.created

    A billing entity was created. Not a storefront shopper — this is something an invoice can be raised against.

  • Customer Updatedstripe.customer.updated

    A billing entity changed. Also raised when one is archived or when an instrument is attached or detached, because all three amend the same record.

  • Payment Createdstripe.payment.created

    A payment intent exists. NOT money — an intent may never be confirmed, and revenue is not entitled to move on this.

  • Payment Succeededstripe.payment.succeeded

    A charge settled. This is the topic revenue moves on, and the reason it is separate from the one above.

  • Payment Failedstripe.payment.failed

    A charge was declined. Distinct from an invoice failure: this is a checkout problem, that one is dunning.

  • Payment Refundedstripe.payment.refunded

    Money was returned to a payer. Negative revenue — a report that added it would count a return as a sale.

  • Checkout Completedstripe.checkout.completed

    A hosted checkout was paid. Arrives from the far side; no operation here raises it, because creating a session is an invitation and not a transaction.

  • Subscription Createdstripe.subscription.created

    A recurring agreement began. Recurring revenue moves on this; the first collection is a separate payment event.

  • Subscription Updatedstripe.subscription.updated

    An agreement was amended, paused or resumed. A pause raises this and never the cancellation below — a paused subscription is not churn.

  • Subscription Cancelledstripe.subscription.cancelled

    An agreement ended, immediately or at period end. This is the topic a churn figure counts.

  • Invoice Createdstripe.invoice.created

    A draft invoice exists. Nothing is owed yet — finalising is what turns a description into a debt.

  • Invoice Paidstripe.invoice.paid

    An invoice collected. A receivable became money, which is two facts and not one.

  • Invoice Payment Failedstripe.invoice.failed

    A recurring collection failed and the invoice stays open. This is where dunning begins, and it is the highest-value subscriber hook on this connector.

  • Dispute Createdstripe.dispute.created

    A chargeback was raised by an issuing bank. Arrives from the far side — no operation here creates one, and one that claimed to would attribute a customer's action to the operator.

  • Dispute Updatedstripe.dispute.updated

    Evidence was filed or a decision landed. The disputed amount is withheld from the moment the dispute opens, not from this.

  • Payout Createdstripe.payout.created

    Settled funds left the balance for a bank account. The operator's own money moving, not a customer's.

  • Payout Failedstripe.payout.failed

    A transfer was rejected and the funds returned to the balance. A treasury incident rather than a customer one.

  • Balance Updatedstripe.balance.updated

    Available funds changed. Raised by refunds as well as payouts — a treasury view hearing only about payouts would drift by the refund total.

  • Webhook Receivedstripe.webhook.received

    An inbound delivery arrived and verified. Raised before it is interpreted, so an unrecognised payload is still visible.

  • Sync Completedstripe.sync.completed

    A scheduled reconciliation finished. Declared and raised by nothing here — reconciliation is a schedule, and this runtime resolves calls rather than running schedules.

Routed by the event bus alongside the platform's own topics. See the fan-out chains.

Workflow actions16

What a future workflow step can request. Several share one capability — the capability is what the gateway routes on, the action is what an operator building a workflow recognises.

  • Create Customerpayer.write

    Creates a billing entity. The step a completed company.created fan-out resolves to — a new company acquires somewhere to be billed, not an invoice.

  • Update Customerpayer.write

    Amends contact details or metadata on an existing billing entity. Same capability, different payload.

  • Attach Payment Methodpaymentmethod.attach

    Binds an already-tokenised instrument. The tokenisation happens in the vendor's hosted field and never in a workflow.

  • Create Paymentpayment.create

    MOVES MONEY. Raises a charge for a stated amount. A step wanting a customer to pay at their own pace wants a payment link instead.

  • Refund Paymentrefund.write

    MOVES MONEY, outward. The processing fee is not returned, so a fully refunded payment leaves the operator down the fee rather than square.

  • Create Payment Linkpaymentlink.write

    A reusable URL. Collects nothing until somebody follows it, so the step completes without money having moved.

  • Create Checkout Sessioncheckout.write

    Single-use and expiring, unlike a payment link. A step creating one per customer and one creating a link per campaign are both correct and are not interchangeable.

  • Create Invoiceinvoice.write

    The step a completed workflow resolves to. Raises a draft — nothing is owed until it is finalised.

  • Finalise Invoiceinvoice.finalise

    Turns a description into a debt. Separate from creation precisely so an approval gate has somewhere to stand.

  • Send Invoiceinvoice.send

    Delivers a finalised invoice. Does not collect — the payer follows the link at their own pace.

  • Collect Invoiceinvoice.pay

    MOVES MONEY. Charges the method on file against an open invoice, and reports whether dunning begins.

  • Create Subscriptionsubscription.write

    Begins a recurring agreement. Every later collection follows from this one step, which is why it is worth a review gate even though it collects nothing itself.

  • Cancel Subscriptionsubscription.cancel

    Ends an agreement now or at period end. Counted as churn either way.

  • Pause Subscriptionsubscription.pause

    Suspends collection without ending the agreement. Not churn, and a metric that counted it as such would understate retention.

  • Resume Subscriptionsubscription.pause

    The same capability in the other direction — on this platform both are one write to one field. See the plugin's operations header.

  • Publish Product and Priceprice.write

    Attaches a price to a billable product, making it sellable. Prices are immutable, so a price change is a new price rather than an edit.

Knowledge Graph entities10

Node kinds this connector would project. External entities enter the graph on exactly the terms internal ones do — the graph owns neither, and no database change is implied by any of it.

  • Customerroot nodepayer.read

    A root. A billing entity may appear under several Stripe accounts on a multi-account estate and is still one entity.

  • Productroot nodebillingproduct.read

    A root, and DISTINCT from a storefront product even where an enterprise sells the same thing through both. One is merchandised, the other is billed.

  • Pricechild of billing-productprice.read

    A child. Prices are immutable, so a product accumulates them — a graph showing one price per product would show the wrong one for most subscriptions.

  • Paymentroot nodepayment.read

    A root. It references a payer and a product and belongs to neither — it is the event that connects them.

  • Refundchild of paymentrefund.read

    A child. A refund cannot exist without the charge it reverses, and is a fact about that charge rather than about the customer.

  • Disputechild of paymentdispute.read

    A child, for the same reason. Raised by an issuing bank rather than by either party in the graph.

  • Invoicechild of payerinvoice.read

    A child. An invoice is always raised against one billing entity, and an unpaid one is a receivable rather than a payment.

  • Subscriptionchild of payersubscription.read

    A child. The agreement that generates invoices, which is why it hangs from the payer and not from the invoices it produces.

  • Payoutroot nodepayout.read

    A root, and the operator's rather than a customer's. Hanging it under a payer would put the operator's treasury inside somebody's account record.

  • Connected Accountroot nodeconnectedaccount.read

    A root. An account this platform acts for is a party in its own right, not a property of the platform that onboarded it.

Decision Engine insights13

Advisory reads this connector's data would support. The Decision Engine sees one instant and stores no history, so each insight states whether it is instantaneous or needs a series.

  • Revenuepayment.read · refund.read

    Instantaneous. Settled charges less refunds. Both reads are required — revenue net of nothing is gross receipts, which is a different and larger number.

  • Recurring Revenuesubscription.read · subscriptionitem.read · price.read

    Instantaneous, and the one figure here that is a projection rather than a measurement — it states what would be collected if nothing changed, which is never quite true.

  • Subscription Growthsubscription.read

    Needs a series. A count of active agreements at one instant says nothing about direction, and direction is the whole question.

  • Churnsubscription.read · subscriptionitem.read

    Needs a series. Cancellations over a period against the base at its start. A paused agreement must be excluded — counting it would report churn that reverses itself.

  • Failed Paymentspayment.read · invoice.read

    Instantaneous. Both reads, because a declined checkout and a failed recurring collection are different problems needing different work.

  • Refund Raterefund.read · payment.read

    Needs a series to be useful. The instantaneous ratio is computable and nearly meaningless — a refund is usually issued in a later period than the charge it reverses.

  • Customer Lifetime Valuepayer.read · payment.read · subscription.read

    Needs a series, and a long one. The measured half is what a customer has paid; the projected half needs a churn rate, which itself needs history.

  • Average Transaction Valuepayment.read

    Instantaneous. Settled charges over their count. Refunds are excluded deliberately — netting them in would report an average nobody was ever charged.

  • Outstanding Invoicesinvoice.read

    Instantaneous. Finalised and uncollected. This is a receivable, and an alert reading it as revenue would report money the operator does not have.

  • Payment Failure Ratepayment.read · invoice.read

    Needs a series. A rate that moved is the signal; a rate that is merely high may be the account's normal, and an alert on the level alone would fire forever.

  • Payout Healthpayout.read · balance.read · balancetransaction.read

    Needs a series. A single failed payout is an incident; repeated ones are a bank detail problem, and only the second is worth waking somebody for.

  • Dispute Ratedispute.read · payment.read

    Needs a series, and it is the one insight here with a hard external consequence — card networks impose monitoring above a threshold, so the trend crossing it matters more than the count.

  • Revenue Trendpayment.read · refund.read · balancetransaction.read

    Needs a series, by definition. Included rather than omitted so a future rule author can see the shape it will read when history exists.

Intelligence metrics12

Figures this connector would publish to the Intelligence Center. Each names the capability that supplies it, so a metric cannot be charted for a grant that does not cover the read behind it.

  • Total Revenuecurrencypayment.read

    Settled charges. Follows payment.succeeded rather than payment.created — an unconfirmed intent is not revenue.

  • Paymentspaymentspayment.read

    Count of settled charges. Beside the revenue figure rather than instead of it — the two move independently and a change in either alone is the interesting case.

  • Refundscurrencyrefund.read

    NEGATIVE REVENUE. Subtracted from the revenue figure, never added to it. The processing fee is not returned, so a full refund costs more than the charge earned.

  • Subscriptionssubscriptionssubscription.read

    Active agreements, including paused ones. A pause is a suspension and not an ending, and excluding them would report churn that has not happened.

  • Active Customerscustomerspayer.read

    Billing entities with a payment or an active agreement. Not the same population as a storefront's customers, and the two must not be added together.

  • Failed Paymentspaymentspayment.read

    Declined charges. A rising count against flat revenue is the earliest visible sign of an expiring card estate.

  • Outstanding Invoicescurrencyinvoice.read

    RECEIVABLE, not revenue. Finalised and uncollected, some of which will be voided. Adding it to revenue would book money that may never arrive.

  • Payoutscurrencypayout.read

    Funds moved to the bank. A TRANSFER rather than a gain — the money was already the operator's, and counting it as income would count every payment twice.

  • Disputesdisputesdispute.read

    Open chargebacks. The count matters more than the amount, because card networks monitor the RATE and impose programmes above a threshold.

  • Recurring Revenuecurrencysubscription.read

    A projection of what would be collected if nothing changed. Beside total revenue and never summed with it — the same money appears in both.

  • Churn% of subscriptionssubscription.read

    Needs a series the Intelligence Center does not store yet. Declared so the tile has a defined meaning when it does, rather than acquiring one later.

  • Payment Success Rate% of attemptspayment.read

    Settled attempts over all attempts. Distinct from the connector's own health score: one measures whether customers can pay, the other whether the Hub can reach Stripe.

Agent archetypes served9

Shapes of agent this connector was built for, and the capabilities each requests. Never a connector key — an agent that could name a connector could import one, and the Fleet's isolation would be a convention rather than a structure.

  • Finance Agentpayment.read · refund.read · refund.write · balance.read · balancetransaction.read · payout.read · invoice.read

    The one archetype trusted to return money. Reads treasury and issues refunds; cannot create a payout, because moving the balance is a decision above an agent.

  • Billing Agentinvoice.read · invoice.write · invoice.finalise · invoice.send · invoice.pay · payer.read · paymentmethod.read

    Runs the invoice lifecycle end to end, including collection. Cannot refund — issuing money back is Finance's, behind a review gate.

  • Revenue Agentpayment.read · subscription.read · subscriptionitem.read · billingproduct.read · price.read · price.write · coupon.write

    Prices and packages. Writes prices and coupons and touches no payment — the closest it comes to money is deciding what something costs.

  • Sales Agentpayer.read · payer.write · paymentlink.write · checkout.write · checkout.read · promotioncode.write · price.read

    Creates customers and ways for them to pay. Cannot cancel an agreement or refund — both are retention and finance decisions rather than sales ones.

  • Customer Success Agentpayer.read · payment.read · subscription.read · subscription.pause · invoice.read · paymentmethod.read

    Sees the whole customer and can pause an agreement to defuse a cancellation. DELIBERATELY CANNOT REFUND — a support conversation is the commonest route to an unreviewed refund.

  • Subscription Managersubscription.read · subscription.write · subscription.cancel · subscription.pause · subscriptionitem.read · subscriptionitem.write · usagerecord.read · usagerecord.write

    Owns the agreement lifecycle and metered usage. Cannot refund and cannot invoice ad hoc — it changes what recurs, not what has already been charged.

  • Accounts Receivable Agentinvoice.read · invoice.send · invoice.pay · invoice.void · payer.read

    Chases and collects. Can void a debt and cannot refund one — writing off what was never paid and returning what was are different acts with different approvals.

  • CFO Agentbalance.read · balancetransaction.read · payout.read · dispute.read · payment.read · invoice.read · connectedaccount.read · tax.read

    Reads treasury and writes nothing. Not redundant with Analytics: this one sees balance, payouts and disputes, which is the operator's own position rather than customer behaviour.

  • Analytics Agentpayment.read · refund.read · subscription.read · subscriptionitem.read · payer.read · invoice.read · checkout.read · usagerecord.read

    Eight reads, zero writes, read-only by construction. An analytics agent that could write is an analytics agent that can restate the thing it is measuring.

Archetypes, not roster entries. The Agent Fleet's own registry is unchanged by this connector existing.

Health

46/100

46/100 — Handshake incomplete — the connector is installed but not yet authorised. 1 further penalty applied.

  • 30CredentialHandshake incomplete — the connector is installed but not yet authorised.
  • 24Provider configurationNo account is set. Every operation acts as a specific Stripe account, so nothing can be dispatched until one is supplied. No environment is set. This field decides whether operations move real money, and it is never defaulted — assuming test would present live figures as a rehearsal, and assuming live would apply every safeguard to nothing while the real account went untouched. Set it to one of: test, live.

Authentication

Pending
Method
API Key
Credential
Last verified
never
Principal
Expires
Does not expire
Scopes held
0/35
Scopes
  • customers:read
  • customers:write
  • payment_methods:read
  • payment_methods:write
  • charges:read
  • payment_intents:read
  • payment_intents:write
  • refunds:read
  • refunds:write
  • payment_links:write
  • checkout_sessions:read
  • checkout_sessions:write
  • invoices:read
  • invoices:write
  • subscriptions:read
  • subscriptions:write
  • products:read
  • products:write
  • prices:read
  • prices:write
  • coupons:read
  • coupons:write
  • promotion_codes:write
  • disputes:read
  • disputes:write
  • payouts:read
  • payouts:write
  • balance:read
  • balance_transactions:read
  • connected_accounts:read
  • connected_accounts:write
  • usage_records:read
  • usage_records:write
  • tax_rates:read
  • tax_rates:write
Also accepted
  • OAuth 2.0720h

    Operator authorises on the provider's site; the Hub stores a refresh reference.

  • Bearer Token24h

    A short-lived token presented per request. Refreshed by the Auth Manager.

Prepared, not selectable yet. The Auth Manager derives this connector's state from the method currently in force; switching would be a lifecycle operation, and the handshake below would be rebuilt from the new method's row with no code changing.

Handshake · API Key
  1. 1.InitiateThe Hub prepares a API Key request for Stripe, Inc..
  2. 2.Supply api keyEntered once. Held by reference — the Hub stores no credential material.
  3. 3.VerifyThe Hub performs one authenticated read to confirm the grant, then records the reference.

Nothing is contacted. The Hub stores no credential material — only a masked reference, the granted scopes and an expiry. There is no field on the auth record a secret could go in, which is a stronger guarantee than a policy of not putting one there.

Capabilities45

  • Read paymentspayment.read

    Pull charge and payout history for reporting.

  • Read subscriptionssubscription.read

    Track recurring revenue per company.

  • Issue invoicesinvoice.write

    Raise an invoice from a completed workflow.

  • Read customerspayer.read

    Billing entities, not storefront shoppers — see the note above.

  • Write customerspayer.write

    Create or update a billing entity and its contact details.

  • Archive customerpayer.archive

    Soft-deletes a billing entity, keeping its payment history.

  • Read payment methodspaymentmethod.read

    Which instruments a billing entity has on file.

  • Attach payment methodpaymentmethod.attach

    Binds an already-tokenised instrument to a customer.

  • Detach payment methodpaymentmethod.detach

    Removes an instrument without deleting the customer.

  • Create paymentpayment.create

    Raises a payment intent for a stated amount and currency.

  • Cancel paymentpayment.cancel

    Cancels an intent that has not yet captured.

  • Create payment linkpaymentlink.write

    A reusable hosted URL that collects a payment.

  • Create checkout sessioncheckout.write

    A single hosted checkout for one customer.

  • Read checkout sessioncheckout.read

    Whether a hosted checkout was completed, and for what.

  • Read refundsrefund.read

    Refund history against settled charges.

  • Refund paymentrefund.write

    Returns money to the payer, in full or in part.

  • Read invoicesinvoice.read

    Invoice state, totals and outstanding balance.

  • Finalise invoiceinvoice.finalise

    Closes a draft for edits and makes it payable.

  • Send invoiceinvoice.send

    Delivers a finalised invoice to the billing entity.

  • Pay invoiceinvoice.pay

    Charges a payment method against an open invoice.

  • Void invoiceinvoice.void

    Cancels an unpaid invoice without deleting the record.

  • Write subscriptionssubscription.write

    Create or amend a recurring agreement.

  • Cancel subscriptionsubscription.cancel

    Ends a recurring agreement, now or at period end.

  • Pause subscriptionsubscription.pause

    Suspends and resumes collection — one field, both directions.

  • Read subscription itemssubscriptionitem.read

    The priced lines a subscription is composed of.

  • Write subscription itemssubscriptionitem.write

    Adds, removes or requantifies a line on a subscription.

  • Read productsbillingproduct.read

    Billable products, not merchandisable ones — see the note above.

  • Write productsbillingproduct.write

    Create or update a billable product.

  • Archive productbillingproduct.archive

    Retires a product without breaking existing subscriptions.

  • Read pricesprice.read

    The amounts and intervals a product may be sold at.

  • Write pricesprice.write

    Adds a price to a product. Existing prices are immutable.

  • Create couponcoupon.write

    A reusable discount rule, by amount or percentage.

  • Create promotion codepromotioncode.write

    A customer-facing code that applies a coupon.

  • Read disputesdispute.read

    Chargebacks raised against settled payments.

  • Respond to disputedispute.write

    Files evidence against a chargeback before its deadline.

  • Read payoutspayout.read

    Transfers from the account balance to a bank account.

  • Create payoutpayout.write

    Moves settled funds out of the account balance.

  • Read balancebalance.read

    Available and pending funds held on the operator's behalf.

  • Read balance transactionsbalancetransaction.read

    Every movement into and out of the balance, with fees.

  • Read connected accountsconnectedaccount.read

    The accounts a platform acts on behalf of.

  • Write connected accountsconnectedaccount.write

    Onboards or updates an account under a platform.

  • Read usage recordsusagerecord.read

    Metered consumption already reported for a period.

  • Report usageusagerecord.write

    Files metered consumption against a subscription item.

  • Read taxtax.read

    Tax rates and the treatment applied to a charge.

  • Write tax ratetaxrate.write

    Defines a rate invoices and subscriptions may apply.

Modules request capabilities, never connectors. A capability offered by two connectors gives the requesting module a fallback it does not have to know about.

Usage · 24h

17,280
Calls
86,400
Records
659ms
Mean latency
1%
Error rate
100/min
Rate ceiling
declared by the manifest
24%
Peak usage
saturates at 80%
Peak consumption against ceiling

Event Subscriptions2

  • Workflow Completedworkflow.completed

    A workflow reached its final stage with every gate cleared.

    Raised by workflows · see the fan-out chain

  • Company Createdcompany.created

    A new autonomous company workspace was generated.

    Raised by companies · see the fan-out chain

Publisher

First party
Name
AI-EOS
Publisher ID
aeos
Platform vendor
Stripe, Inc.
Support
operations@ai-eos.internal

Published by the platform itself. These manifests ship with the build rather than being fetched.

Stripe, Inc. owns the platform this plugin reaches. AI-EOS authored the manifest.

Version and changelog

Up to date
Installed
2.0.0
Published
2.0.0
Minimum platform
1.0.0
Compatibility
Compatible
Manifest schema
1.0
First published
13 months ago

Requires platform 1.0.0 or newer. This build is 1.0.0.

  • 2.0.0major · 1 month ago
    • Added a provider runtime covering charges, subscriptions, invoices and payouts.
    • Money derivation refuses rather than guesses when a currency's minor unit is unknown.
    • Multi-instance support: a live account beside a test account.
  • 1.5.0minor · 5 months ago
    • Webhook signature verification over raw bytes, never a re-serialised body.
  • 1.0.0major · 13 months ago
    • First release. API-key authentication and charge read.

Permissions and scopes

viewer+

AI-EOS permissions are what this plugin may do insidethe platform, resolved against the API Gateway’s own table. Scopes are what the external platform is asked to allow. They are different systems and neither substitutes for the other.

  • company:read4 roles

    Companies, departments, executives and the knowledge graph projection.

  • analytics:read4 roles

    Enterprise Intelligence read models and the Decision Engine's outputs.

  • workflow:read4 roles

    Workflows, stages, tasks and approval gates.

Requested external scopes
  • customers:read
  • customers:write
  • payment_methods:read
  • payment_methods:write
  • charges:read
  • payment_intents:read
  • payment_intents:write
  • refunds:read
  • refunds:write
  • payment_links:write
  • checkout_sessions:read
  • checkout_sessions:write
  • invoices:read
  • invoices:write
  • subscriptions:read
  • subscriptions:write
  • products:read
  • products:write
  • prices:read
  • prices:write
  • coupons:read
  • coupons:write
  • promotion_codes:write
  • disputes:read
  • disputes:write
  • payouts:read
  • payouts:write
  • balance:read
  • balance_transactions:read
  • connected_accounts:read
  • connected_accounts:write
  • usage_records:read
  • usage_records:write
  • tax_rates:read
  • tax_rates:write

Dependencies0

Declares no dependencies. It can be installed against an empty estate.

Whether each is satisfied is resolved against the live estate at install time, not here.

Security

Authentication
API Key
Credential storage
Never stored
External scopes
35
AI-EOS permissions
3
Minimum role
viewer
Inbound deliveries
Signature verified
Tenant isolation
Installation state is tenant-scoped

A plugin is a data literal. Nothing in the marketplace executes plugin code, and a plugin cannot bypass the Authentication Manager, the Integration Hub, the API Gateway or a permission check, because it has no code path — the host performs every transition.

The auth state type has no field a credential fits in, so the guarantee is enforced by the type checker rather than by convention.

Privacy

Data leaving AI-EOS
28 capabilities
Data entering AI-EOS
17 capabilities
Modules served
7
Event topics received
2

Direction is declared per capability, so what this plugin can send and what it can receive are both enumerable rather than a matter of trust. It reaches only the modules listed above, and only through capabilities the Integration Hub resolves.

Webhook Manager1

1 active

Logs4

  • Authjust nowInstalled, but configuration is required before the handshake can complete.
  • Sync1h agoSynchronisation completed — 86,400 records reconciled in 24h.
  • Gateway49m ago17,280 gateway calls in 24h at 659ms mean latency.
  • Registry5d agoConnector v2.0.0 installed against manifest schema 1.0.

Roadmap

  • Revenue as a live Executive Team KPI rather than a placeholder
  • Dunning failures raised as Decision Engine alerts
  • Connect OAuth served rather than declared, so a platform can act as a connected account
  • Idempotency keys, once a server exists to hold them — the retry ceiling is today's only control
  • Stripe Tax calculation rather than rate declaration
  • A revenue series the Decision Engine can read, which most of its insights need and none has
  • Per-company payments scoping rather than one shared account

What this connector would gain next. Mirrors the Future Integrations list every module carries in the Navigator registry.