Free checklist · PDF

Is your AI agent safe to touch Stripe?

12 checks before you let an agent refund, cancel or change a plan. Free, two pages, from teams testing agents on real billing.

  • The agent never holds the payment keyIf it can call Stripe itself, every other check is just advice.
  • A retry can’t refund twiceThe three lines that stop a timeout from becoming a double refund.
  • “Done” only when Stripe says soCheck the reply against what really happened, not what the agent claimed.
The AI agent refund safety checklist2 pages · 5 languages · updated Oct 2026

Get the checklist

We email it to you. Takes 10 seconds.

We’ll ask you to confirm your email first · never shared
Tests & guards AI agents onStripePaddleChargebee· the agent never holds your payment keys· EU-hosted · GDPR
See it in action

What’s inside

Twelve checks before you let an AI agent refund, cancel or change a plan. Three of them, as they appear in the PDF.

  • 12 checks in 4 groups: authority, execution, truth, testing
  • Two A4 pages, in 5 languages
  • Written for Stripe, with notes where Paddle and Chargebee differ
Page 1 of the checklistPDF · 2 pages
  • 01The agent never holds the payment keyIf it can call Stripe, Paddle or Chargebee itself, every other check is advice.
  • 05A retry can’t refund twiceOne request = one operation (a business key), the amount reserved before sending, and the provider’s idempotency key on every write.
  • 08“Requested” is not “refunded”Some refunds wait for review (Paddle) or for the gateway (Chargebee). The customer is told the truth until the money moves.
12 checks · 4 groups2 pages · 5 languages · updated Oct 2026
What it catches

The mistakes it helps you catch

Each one is a check from the list. Each one is a way an AI agent loses real money.

DENY01
The agent can call the provider with its own key→ every other check becomes advice
REVIEW02
“Don’t refund more than €50” lives only in the prompt→ a limit is a number checked before the call
×103
A timeout turns into a double refund→ one request, one operation, one idempotency key
VERIFY04
The customer hears “refunded” while Paddle is still reviewing→ “requested” is not “refunded”
VERIFY05
A refund nobody approved goes unnoticed→ changes made outside the agent raise an alert
FAIL06
One passing test run is called done→ agents aren’t deterministic: run every test more than once
How it works

How to use it

1

Get it by email

Confirm your email and the PDF downloads straight away. Two pages, in English, Italian, German, French or Spanish.

2

Tick the 12 checks

Four groups: who may do what, exactly once, did it really happen, and testing. Every empty box is a way your agent can lose real money.

3

Test what’s still open

COLVO runs these checks on your agent in a simulated Stripe, Paddle or Chargebee. In production, Guard holds the key and verifies every result.

Without / with

An agent on billing, with and without the 12 checks

Without COLVO

  • The model decides how much to refund.
  • A retry after a timeout refunds again.
  • The customer hears “done” before any money moves.

With COLVO

  • Your backend sets the mandate, and limits are numbers.
  • One request is one operation, however many retries.
  • “Done” only after the provider says so.
FAQ

About the checklist

Free, two pages, no fluff.

What’s in the checklist?

12 checks in four groups: who may do what, exactly-once execution, checking what really happened, and testing before customers find it. Two A4 pages.

Is it only for Stripe?

No. It is written for Stripe, Paddle and Chargebee, with notes where they differ: Paddle reviews refunds and has no idempotency keys; Chargebee keeps them for 30 minutes.

Which languages is it in?

English, Italian, German, French and Spanish. You get the PDF in the language of this page.

What happens after I sign up?

We email you a link to confirm your address; one click and the PDF downloads. Then a few short emails on testing AI agents. Unsubscribe in one click, any time.

Do I need COLVO to use it?

No. Every check stands on its own. If you want them run on your agent for you, COLVO has a Free plan for testing: see pricing.

Tick all 12 in an afternoon.

Get the checklist by email. One click to confirm, and the PDF downloads straight away.

Stripe · Paddle · Chargebee· the agent never holds your payment keys· EU-hosted · GDPR