iblai-vibe-monetization-app-paywall
/iblai-vibe-monetization-app-paywall
Gate a whole app behind a one-time or monthly payment on the organization's own Stripe
account — linked with Connect with Stripe (the admin signs in on Stripe; the platform
stores only the account id and drives it with ibl.ai's key plus a Stripe-Account header) or
by a pasted restricted key. The admin answers one question in the app, at
/paywall/setup — free, a one-time fee or a monthly fee, in USD — and connects Stripe there;
the agent never touches Stripe. The ibl.ai platform (DM) owns entitlement end to end: it
mints every Checkout Session, verifies the buyer's session read-after-write, records payments
durably, caches answers (grants 60 s, denies 15 s — a session_id punches through a cached
deny), checks subscriptions live, and keeps recorded payers in during a Stripe outage. The app
holds no platform key for any of it: members pay on their own session token, and the two
admin routes forward the admin's own. No cookies, no webhooks, no local payment ledger. It
is the model of ibl.ai's vibe-agent reference app, gated at the door instead of at the first
message.
How a visit flows, after AuthProvider has signed the visitor in: