FINANCE
Catch a real-time refund spike for a single merchant and alert finance
Listens to Stripe refund events as they happen, maintains a rolling hourly count per merchant.
How it runs
The automated pipeline, trigger to output.
- TriggerStripe refund.created webhookStripe
- ActionUpdate rolling hourly refund counter in PostgresPostgres
- LogicCompare hourly rate to 7-day baseline multiplier
- LogicApply per-merchant alert cooldown
- OutputPost urgent spike alert to finance SlackSlack
What it does
Watches the Stripe refund stream in real time and detects when one merchant suddenly starts issuing refunds far faster than its own recent norm. Instead of waiting for a nightly batch, it surfaces a runaway refund script, a misconfigured integration, or fraud while it is still in progress.
When to use it
Use this when minutes matter. A daily cohort report is good for trend hygiene, but a merchant dumping refunds in a single hour needs an interrupt, not a morning summary. This is the early-warning tripwire that complements the batch analysis.
How it works
- 1A Stripe webhook fires on every `refund.created` event.
- 2Increment a rolling 1-hour refund count and amount for that merchant in Postgres.
- 3Branch: compare the current hourly rate to the merchant's trailing 7-day hourly baseline; continue only if it exceeds the multiplier.
- 4Branch: suppress if an alert for this merchant already fired in the cooldown window.
- 5Post an urgent alert to the finance Slack channel with merchant, hourly count, baseline, and a refund link.
Set it up
What you configure once, before turning it on.
- 1Connect StripeCustomers, subscriptions, payments.
- 2Connect PostgresAny Postgres URL — query, write, migrate.
- 3Connect SlackChannels, DMs, threads, mentions.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More Finance workflows
Expense Submission Webhook Instant Triage and Routing
Receives each expense submission via webhook the instant it's filed, classifies it as in-policy, needs-review, or hard-violation, and routes it to auto-approval.
Monthly Vendor Spend Anomaly Brief for Finance Leads
Once a month, an agent analyzes the full expense ledger for vendor and category spend anomalies, drafts a narrative brief with the top outliers and likely causes.
Accrual Chase Board in Monday with Per-Owner Tasks
On a schedule it reads open uncoded expenses from Snowflake and creates or updates a Monday item per department owner.
Detect Annual-to-Monthly Downgrade Refunds Owed
Catches subscriptions switched from an annual term to monthly partway through the prepaid year, computes the unused prepaid balance owed back.
Detect Mid-Cycle Plan Change Mischarges and Queue Credit Memos
Listens for Stripe subscription plan changes, recomputes the correct prorated amount.
Overdue Accrual Escalation Emails to Owners and Managers
On a schedule it flags uncoded spend that has stayed open past the chase deadline and emails each delinquent owner via Gmail.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.

Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.
