Connect Stripe
Make a read-only key in the Stripe dashboard and paste it in Setup. Nothing else is asked of your account.
The product reads your paid invoices, refunds and cancellations from Stripe. For that you make a restricted key that can read and nothing more, and paste it once. The product cannot change anything in your Stripe account.
Make the key
- In the Stripe dashboard, open Developers, then API keys.
- Choose Create restricted key.
- Give it READ access to these six resources: Events, Checkout Sessions, Invoices, Subscriptions, Customers and Charges.
- Leave every other resource on None. Do not give any resource write access.
- Create the key and copy it.
Paste it
Paste the key in step 1 of Setup, or later in Settings, Stripe. Only restricted keys are accepted: they start with rk_live_ or rk_test_.
A full secret key, one that starts with sk_, is refused. It would give this product more access than it needs, so it never gets to hold one.
When you save, the product checks the key by reading your account and one page of each of the six resources. If Stripe refuses one of them, the message names the permission that is missing. Add it to the key in Stripe, or make a new key, and paste again.
What happens next
- The product reads new events from your account every five minutes. A sale can take that long to show up.
- The key is stored encrypted. Settings, Stripe shows only its last four characters.
- If Stripe later refuses the key, Settings, Stripe says so and tracking stops until you paste a new one.
Revoke the key
You can end the product's access at any time, from either side.
- In Stripe: open Developers, then API keys, find the restricted key and delete it. The product's next read is refused and it stops reading.
- In the product: choose Disconnect in Settings, Stripe. The product forgets the key.