Docs

Stripe Integration

Audit Stripe payment security — webhooks, API keys, and configuration.

#Setup

  • 1

    Get a Stripe secret key

    Go to dashboard.stripe.com/apikeys. Copy a secret key (sk_live_... or sk_test_...).
  • 2

    Connect in Vergate

    Go to Integrations, click Connect on Stripe, and paste the key.
  • 3

    Verify

    Click Test Connection — Vergate fetches your Stripe balance to validate the key.

    • #What It Scans

    Key validity — Does the secret key authenticate?
    Key mode — Is the connected key test or live? (Mixing these up breaks payments)
    Webhook configuration — Are webhooks HTTPS-only and using checkout.session.completed?
    API key inventory — Are there revoked or exposed keys in your account?

    Caution. Never use a restricted key or a key with excessive permissions in production. Use the principle of least privilege and rotate keys that are committed to code.