Catalogue › Commerce › AffiliatePoppy
AffiliatePoppy
Launch your own affiliate programme — partners get a personal code for your Stripe checkout.
Download AgentsPoppy to get AffiliatePoppy
The AgentsPoppy app is free, and runs on macOS, Windows and Linux. AffiliatePoppy installs from inside it — the app asks your permission, shows exactly what will be created in your cloud, and can remove all of it later.
What you'd be asked to approve
Before AffiliatePoppy can touch your AWS account, AgentsPoppy shows this exact grant and waits for your yes. This preview is computed from the poppy's reviewed package by the same assessor code the app runs — it is the approval screen, shown early.
- cloudformationIts own
Can create, change and delete only CLOUDFORMATION resources named arn:aws:cloudformation:*:*:stack/AffiliatePoppy* — it cannot change or delete any CLOUDFORMATION resource with a different name.
7 actions
CreateStack · UpdateStack · ContinueUpdateRollback · DeleteStack · DescribeStacks · DescribeStackEvents · DescribeStackResources - dynamodbIts own
Can create, change and delete only DYNAMODB resources named arn:aws:dynamodb:*:*:table/AffiliatePoppy* — it cannot change or delete any DYNAMODB resource with a different name.
12 actions
CreateTable · DeleteTable · DescribeTable · UpdateTimeToLive · DescribeTimeToLive · TagResource · ListTagsOfResource · Query · GetItem · PutItem · UpdateItem · DeleteItem - lambdaIts own
Can create, change and delete only LAMBDA resources named arn:aws:lambda:*:*:function:AffiliatePoppy* — it cannot change or delete any LAMBDA resource with a different name.
13 actions
CreateFunction · DeleteFunction · GetFunction · UpdateFunctionCode · UpdateFunctionConfiguration · CreateFunctionUrlConfig · DeleteFunctionUrlConfig · GetFunctionUrlConfig · AddPermission · RemovePermission · GetPolicy · TagResource · ListTags - iamIts own
Can create, change and delete IAM identities and permissions named arn:aws:iam::*:role/AffiliatePoppy* — this controls who can do what in your account.
11 actions
CreateRole · DeleteRole · GetRole · PassRole · PutRolePolicy · DeleteRolePolicy · GetRolePolicy · PutRolePermissionsBoundary · DeleteRolePermissionsBoundary · TagRole · ListRoleTags - logsIts own
Can create, change and delete only LOGS resources named arn:aws:logs:*:*:log-group:/aws/lambda/AffiliatePoppy* — it cannot change or delete any LOGS resource with a different name.
5 actions
CreateLogGroup · DeleteLogGroup · PutRetentionPolicy · TagResource · ListTagsForResource - s3Its own
Can create, change and delete only S3 resources named arn:aws:s3:::affiliatepoppy-deploy-* — it cannot change or delete any S3 resource with a different name.
5 actions
CreateBucket · DeleteBucket · ListBucket · PutBucketTagging · GetBucketLocation - s3Its own
Can create, change and delete only S3 resources named arn:aws:s3:::affiliatepoppy-deploy-*/* — it cannot change or delete any S3 resource with a different name.
3 actions
PutObject · GetObject · DeleteObject - ssmIts own
Can create, change and delete only SSM resources named arn:aws:ssm:*:*:parameter/affiliatepoppy/* — it cannot change or delete any SSM resource with a different name. It can also read the contents of those SSM secrets.
5 actions
GetParameter · PutParameter · DeleteParameter · AddTagsToResource · ListTagsForResource - cognito-idpIts own
Can create, change and delete only COGNITO-IDP resources tagged as its own — it cannot change or delete any COGNITO-IDP resource with a different tag.
10 actions
CreateUserPool · DeleteUserPool · UpdateUserPool · DescribeUserPool · GetUserPoolMfaConfig · DeleteUserPoolClient · UpdateUserPoolClient · DescribeUserPoolClient · TagResource · ListTagsForResource - cognito-idpBroad
Can create new COGNITO-IDP resources in your account, but cannot change or delete anything that already exists.
1 action
CreateUserPoolClient
Nothing can be approved from a web page. The real Approve lives in the AgentsPoppy app on your machine, where this grant meets your actual AWS account — and where you can reject it, or tear down everything it created, at any time.
Evaluating AffiliatePoppy for a company? Its vendor security package is audit-ready documentation for your SOC 2 or vendor-risk process — generated from the same reviewed package, with a machine-readable copy for procurement tooling.
About AffiliatePoppy
AffiliatePoppy lets any business that sells with Stripe run its own affiliate programme. Creators, partners and happy customers get a personal discount code for your checkout; every sale they bring is counted and their commission worked out, so you always know exactly what you owe — and your ledger and Stripe keys stay in your own cloud account. Attribution happens at checkout (a redeemed code), so there are no cookies, no consent banner and nothing to install on your website; subscriptions keep earning on renewals and refunds take their commission back automatically, proportionally for partial refunds. Your partners sign up on a hosted page at affiliates.agentspoppy.com/your-name — free on every plan — where their earnings are computed independently, straight from Stripe's events: a record you could not edit if you wanted to, which is why good partners say yes. Marketplaces are covered too: codes are minted on your connected accounts and their sales counted like your own. The app never moves money — you pay your partners yourself, and it keeps the honest ledger, per currency, with CSV export. Pro removes the page's small Free notice and puts your brand on it.
What you get
Included, free
- ✓Codes, not cookiesAttribution happens at your Stripe checkout — a redeemed personal code. Consent-banner refusals, cookie caps and cross-device journeys never lose a partner their commission.
- ✓Your own cloud, your ledgerYour ledger and your Stripe keys stay in your own cloud account, never on our servers — and the app can never move money.
- ✓A hosted signup page partners can trustClaim affiliates.agentspoppy.com/your-name, free. Partners enrol, get their code, and watch earnings computed independently from Stripe's own events — a record you cannot edit.
- ✓Subscriptions and refunds done rightRenewals keep earning even though Stripe shows no code on them — or switch to first-payment-only. Refunds take their commission back automatically, proportionally.
- ✓Marketplaces includedRun a Stripe platform? Codes are minted on your connected accounts too, their sales counted like your own, and the ledger shows what each developer owes back.
- ✓Leaves no traceRemove it and everything it created goes: the stack, the secrets, its Stripe webhooks, the codes and coupons. Your page closes honestly — partners keep seeing what they earned.
Paid features
- ★Your brand, no noticePro removes the page's small 'runs on AffiliatePoppy Free' notice and adds your logo, colour and your own words.
Pricing
Prices are read live from the developer's own listing. Whatever this poppy costs, the cloud resources it creates are billed by AWS directly to you — AgentsPoppy never marks them up. Paid features are bought inside the app; the developer is the merchant of record.
Data & privacy
The developer declared that this poppy sends the following out of your cloud:
Your programme's public face: your name, logo, colour, offer text, terms and the discount/commission percentages → agentspoppy.com · Renders your partners' signup page at affiliates.agentspoppy.com/your-name — only if you claim one · retained by the developer
Commission events for your partners (amounts, currency, which code), sent by your own Stripe via a webhook you create → agentspoppy.com · The independent earnings record your partners see — numbers computed from Stripe's events, that you cannot edit · retained by the developer
Developer & support
| Developer | OllyDigital |
|---|---|
| Website | https://agentspoppy.com/affiliatepoppy |
| Source code | https://github.com/leonct74/affiliatepoppyPublic by requirement — you or your AI can audit exactly what it does before installing. |
| Support | support@agentspoppy.com https://github.com/leonct74/affiliatepoppy/issues |
| Privacy policy | https://agentspoppy.com/privacy |
| Terms of use | https://agentspoppy.com/terms |
| Age rating | Everyone |
| Runs on | macOS, Windows and LinuxNeeds AgentsPoppy 0.3.1 or newer. |
| Where it runs | Your own AWS account.AgentsPoppy holds no copy of your data and cannot read it. Cloud usage is billed to you by AWS at their prices. |
Support for the poppy itself comes from its developer. For the AgentsPoppy app, see Security or our terms.
Ready to run AffiliatePoppy in your own cloud?
Download the free AgentsPoppy app for macOS, Windows or Linux, connect your AWS account once, and install AffiliatePoppy from the catalogue inside it.