Transactional overview
Sill Transactional lets AI agents place orders and request refunds on your store under rules you set. Every request is signed by the agent, checked against your rules, optionally held for a person on your team, charged on your own Stripe account, and recorded in a signed audit log you can export and verify. Sill never holds the card or the money: Stripe charges, settles and pays out.
Transactional is in early access and is set up with you. It builds on Discovery, which identifies and logs agent visits for free.
How an agent order works
Section titled “How an agent order works”- Signed request. The agent sends a signed mandate: who it is, who it acts for, what it wants to buy, and the most it may spend. Sill checks the signature against the agent’s registered key.
- Your rules. Sill runs the site’s active policy, the rules you manage under Rules. The result is approve, escalate or reject.
- Outcome. An approved order is charged on your Stripe account. An escalated order is held on Held orders until an Owner or Admin approves or rejects it (Human in the loop). A rejected order stops there and nothing is charged.
- Signed record. Every decision, every reviewer action and every successful charge is written to the signed, chained audit log, which you can export and anyone can verify.
sequenceDiagram
autonumber
participant Agent
participant Sill
participant Team as Your team
participant Stripe as Stripe (your account)
Agent->>Sill: Signed order
Sill->>Sill: Verify signature, run your guardrails
alt Rejected
Sill-->>Agent: rejected (nothing charged)
else Escalated
Sill-->>Agent: escalated (held for review)
Sill->>Team: Email and Slack alert
Team->>Sill: Approve or reject on Held orders
opt Approved
Sill->>Stripe: Charge
end
else Approved
Sill-->>Agent: approved
Sill->>Stripe: Charge
end
Sill->>Sill: Signed audit record of the decision and the charge
What is available today
Section titled “What is available today”| Part | Status |
|---|---|
| Signed mandates over A2A, AP2 and MCP | Available. See Signed mandates. |
| Rules (policy engine) | Available. See Policy engine. |
| Human review of held orders, with email and Slack alerts | Available. See Human in the loop and Escalation alerts. |
| Charges and refunds on Stripe | Available in test and live mode. See Payments and Refunds. |
| Shopify settlement | Test mode only; connected Shopify stores run against Shopify’s test endpoints. |
| WooCommerce | Orders are charged and refunded on Stripe, then written back to your WooCommerce store. See Connect payments. |
| UCP checkout for shopping platforms | Available for Stripe-connected sites. See UCP checkout. |
| Agentic checkout through Stripe (ACP) | Not available to merchants. See Agentic checkout (Stripe ACP). |
| x402 | Not supported. |
For every protocol’s status, see Protocols.
What Sill is not
Section titled “What Sill is not”Sill is not a payment processor, money transmitter, fraud system or identity-verification service, and it holds no PCI certification. It handles only Stripe’s opaque payment tokens, never card numbers, and money only ever moves inside Stripe. See Compliance.
Frequently asked
Section titled “Frequently asked”Does Sill ever hold the money or the card?
Section titled “Does Sill ever hold the money or the card?”No. Stripe holds the card, charges it on your connected account, settles to that account and pays you out. Sill decides, asks Stripe to charge, and records the result.
Who signs what?
Section titled “Who signs what?”The agent signs the order with its own key; Sill verifies it against the key registered for that agent. Sill then signs the audit record of what it decided. You can export the records and verify them against Sill’s published key; see Verify a signature.
What happens when a rule escalates instead of rejecting?
Section titled “What happens when a rule escalates instead of rejecting?”The order is held: nothing is charged and nothing is sent to your store. It appears on Held orders, and your team gets an email (and a Slack message, if connected). An Owner or Admin approves or rejects it; Reviewers can look but not decide. If nobody decides within 24 hours, the order is rejected. See Human in the loop.
How are refunds handled?
Section titled “How are refunds handled?”The agent sends a signed refund request that goes through your guardrails like an order and is refunded on the rail that took the payment. See Refunds.
Can I enable Transactional today?
Section titled “Can I enable Transactional today?”Transactional is available to a limited set of merchants and is set up with you rather than self-serve; a data processing agreement is part of onboarding. Contact us through the email on sill.so. Discovery is free and needs no Transactional access.