Compliance infrastructure for subscriptions

curl https://app.checkbox.site/v1/checks/stripe_checkout_session \
  -u "$CHECKBOX_SECRET_KEY:" \
  -H "Content-Type: application/json" \
  -d '{
    "params": {
      "mode": "subscription",
      "line_items": [{ "quantity": 1, "price_data": { "currency": "usd", "unit_amount": 1999,
        "recurring": { "interval": "month" }, "product_data": { "name": "Acme Pro" } } }],
      "subscription_data": { "trial_period_days": 14 },
      "success_url": "https://acme.example/welcome"
    },
    "merchant": { "merchant_name": "Acme", "cancel_url": "https://acme.example/account/cancel" }
  }'

{
  "object": "check_result",
  "kind": "stripe_checkout_session",
  "verdict": "fail",
  "summary": { "pass": 5, "fail": 2, "needs_review": 3, "not_applicable": 0 },
  "checks": [{
    "check_id": "signup.consent.affirmative",
    "status": "fail",
    "severity": "critical",
    "requirements": [
      { "citation": "15 U.S.C. § 8403(2)" },
      { "citation": "Cal. Bus. & Prof. Code § 17602(a)(2)" }
    ]
  }],
  "correction": {
    "patch": [
      { "op": "add", "path": "/consent_collection", "value": { "terms_of_service": "required" } },
      { "op": "add", "path": "/custom_text", "value": { "submit": { "message": "Your free trial lasts 14 days…" } } }
    ],
    "verification": { "passes": true, "remaining_checks": [] }
  },
  "next_action": {
    "type": "apply_patch",
    "message": "Apply correction.patch (JSON Patch) to the params of stripe.checkout.sessions.create, then call this check again with the new params."
  }
}

1. 01

   Your agent makes one call

   setup_checkbox (MCP) learns the site, checkout, brand, plans and policy pages from your code.

2. 02

   You click Approve once

   A browser login like the Stripe or Vercel CLI. Test keys land in .env.local, never in the repo.

3. 03

   Checkbox learns the business

   It installs the snippet, reads your Terms, and runs a synthetic test subscription in Stripe test mode.

4. 04

   Your agent gets a compliance plan

   Ordered tasks with the requirement, the file or Stripe setting, the exact change and how to verify it.

5. 05

   Fix, verify, repeat

   The agent applies each change and calls verify; every response names the next action until it says done.

API, SDKs, CLI, MCP and llms.txt

• Preflight API and CLI

  Check before you ship

  Send your disclosure text, Stripe Checkout Session or Payment Link params, a lifecycle email or a page’s HTML. Get a verdict per legal requirement, with citations and the exact fix — before anything is deployed.

  • POST /v1/checks/* or checkbox check
  • Corrected Stripe params as a JSON patch
  • Generated, engine-verified copy and email templates
  • Runs in CI; offline mode without a key

• Checkbox Elements

  Drop-in compliant checkout

  A web component (and React wrapper) that renders the renewal disclosure for your terms with an unchecked, required consent checkbox, directly above your pay button — and records each consent.

  • Locked wording from your price, interval and trial
  • Pay button disabled until the box is ticked
  • Consent records (cons_…) you store with the subscription
  • Each consent added to the evidence vault

• Monitoring and evidence

  Monitor and prove

  Synthetic test subscriptions in your billing platform’s test mode, a snippet on your pages and captured emails cover sign-up, acknowledgment, reminders and online cancellation. Legally required notices can be sent for you.

  • Scans as a shopper in each state, desktop and mobile
  • Notices: acknowledgment, trial and renewal reminders
  • Hash-chained, signed evidence
  • Monitoring certificates and a public verification page

• Stripe

  Billing (Stripe-first)

  Checkout, Payment Links, Elements, Billing and the Customer Portal; test clocks for proof tests; Notices. Everything Checkbox does works with Stripe.

• Shopify

  Checks only

  Checkbox checks your storefront, the emails you BCC and the cancellation flow. No app-store install yet; test subscriptions and Notices need Stripe.

• Recharge

  Checks only

  Recharge, Paddle and other billing platforms: pages, BCC’d emails and the cancellation flow are checked; billing connection, test subscriptions and Notices currently work with Stripe.

• MCP

  Agents

  Task-oriented tools (setup_checkbox, get_compliance_plan, verify_task…) plus call_api for every other operation, for any MCP client.

• Claude

  Coding agent

  Claude Code calls setup_checkbox over MCP and loops on next_action until done.

• Cursor

  Coding agent

  The same CLI and MCP tools from Cursor’s agent; Copilot, Windsurf and Codex too.