issafu.com

Unlike listing_pay_card (which requires a human to complete a browser-based Stripe Checkout and is only confirmed via Stripe's verified webhook), listing_pay_stripe lets the calling agent submit a stored payment method id (pm_...) and have the site charge it 'off-session' directly. The description says the agent must be 'entitled to use' the payment method, but the tool itself provides no verification that the human present in the conversation authorized this specific charge at this specific time — an agent could invoke this tool to charge a previously-stored card without the user actively confirming the transaction in the moment. This is a meaningfully broader capability (autonomous fund movement) than the other, safer payment path in the same tool set.