What it can do
Tick what the agent may do. Everything is ticked when you add the action.Who it answers for
The agent only ever answers about the customer’s own account, found by their email address in Stripe. That address has to be proved, one of three ways:- A verified visitor whose email you signed. In chat, a verified visitor is proved by their email only when your server signs the email too, with
email_hash. Signing the user id alone does not prove the email, because the page could put any address beside it, so those visitors are asked for a code like anyone else. - The email they wrote from. On email, the agent’s reply only goes back to that mailbox, so it is proved for reading. Cancelling by email still needs a fresh code, because anyone can put someone else’s address on an email and reply into their thread: one sent in the last 10 minutes, and used up by the cancellation. An older code on the thread does not count.
- A code. Anyone else, including every caller, is asked for the email on their account. The agent emails a 6-digit code there, and they read it out or type it back. Codes last 10 minutes; a conversation can ask for three, and five wrong tries spend a code. Once read back, a code proves the address for 30 minutes, and only to whoever read it back in that conversation. A code wins over a signed email or the address they wrote from, so a customer whose billing address is a different one can prove that one and ask about it.
Set it up
1
Connect Stripe
See Stripe for the restricted key and its permissions.
2
Add the action
Agents → your agent → Actions → Add action → Stripe billing. Tick what the agent may do.
3
Choose where the card link returns (optional)
Back to your site after updating the card is where Stripe sends them afterwards. Leave it empty to use your customer portal’s own return link.
4
Pick channels and save
Each agent has one Stripe billing action. Edit it to change what’s ticked.
When something goes wrong
If Stripe refuses the key, for example because it lacks a permission, or can’t be reached, the agent offers to take a message, and the Stripe card on Actions › Connections shows Last request failed with Stripe’s reason. It clears the next time a request goes through. When Stripe turns down one request but the key is fine, for example a plan that no longer exists, the agent tells the customer and the card is left alone. Every lookup appears in the action log with its tool name:stripe_get_subscription, stripe_list_invoices, stripe_cancel_subscription, stripe_payment_method_link, send_verification_code and check_verification_code.