Skip to main content
Commerce & billing

Stripe restricted key

1 min read·Updated July 28, 2026
Setup time
~8 min
Difficulty
easy
Who bills
Stripe

What it is

A restricted API key with only the permissions LedgerLite needs (read-only for reconciliation, or scoped write for refunds/dunning).

Why Hi5Agents uses it

Never share your Stripe secret key. A restricted key limits blast radius and is easy to revoke.

Agents unlocked

One Stripe restricted key powers 4 agents. Typical cost Free.

Reads invoice status for dunning.

Scopes: Invoices: ReadCustomers: Read
RetainerXRequired

Reads subscription state for renewals.

Scopes: Subscriptions: ReadCustomers: Read
PulseBoardUnlocks a mode

Live revenue metrics. Internal-mode works without it.

Scopes: Charges: ReadBalance transactions: Read
LedgerLiteUnlocks a mode

Auto-feed payouts and transactions. CSV mode works without it.

Scopes: Payouts: ReadBalance transactions: Read

Building a stack? Try the stack builder or open the full matrix.

Setup steps

  1. 1In the Stripe dashboard, go to Developers → API keys.
  2. 2Click 'Create restricted key'.
  3. 3Grant only Read for Charges, Payouts, and Balance transactions (add write access only if the agent manual says so).
  4. 4Copy the key (starts with rk_...).
  5. 5Paste it into Hi5Agents → Settings → Keys → Stripe.

Billing

No extra Stripe cost. Our own subscription billing uses a separate platform key you never see.

Provider docs ↗

Was this accurate?Found an inaccuracy? We fix docs fast.