An approved refund can still fail
KIFF records the tool’s response beside its authorization decision and brings pending approvals back into the agent’s session through MCP.
kiff.dev 5 posts
KIFF records the tool’s response beside its authorization decision and brings pending approvals back into the agent’s session through MCP.
Build a Stripe test-mode MCP tool, connect it to KIFF, and reproduce an allowed refund, an owner approval, and a limit change with Codex.
A KIFF Card now holds an action that falls outside it for its owner, who can approve it once, change the card or reject it; we tested all three on production.
The KIFF MCP gateway checks every tool call an agent makes against its Card. Since 2 October it is set up from the dashboard, held calls are emailed to the owner, and a hold nobody answers is refused.
A live Agno agent on Bedrock, governed by a KIFF Card through kiff-guard on production: what it was allowed, what it was refused, and what the card recorded.