Get started
Stripe
Protect a Stripe secret key with payment caps and only the endpoints your app needs.
Node.js
1import Stripe from 'stripe';2 3// .env: STRIPE_GHOST_KEY=gk_stripe_...4const stripe = new Stripe(process.env.STRIPE_GHOST_KEY, { host: 'api.vallkey.com' });5 6const intent = await stripe.paymentIntents.create({ amount: 2000, currency: 'usd' });Python
1import os, stripe2 3stripe.api_key = os.environ["STRIPE_GHOST_KEY"]4stripe.api_base = "https://api.vallkey.com"5 6intent = stripe.PaymentIntent.create(amount=2000, currency="usd")curl
curl https://api.vallkey.com/v1/customers?limit=3 \ -H "Authorization: Bearer $STRIPE_GHOST_KEY"New Stripe keys start with these rules: read anything (GET /v1/**), create and update customers, create, update and confirm Payment Intents, create Checkout Sessions, and at most 100 requests a minute. Refunds, payouts, transfers and connected accounts are off until you allow them.
Stripe requests must be form-encoded (the official SDKs do this), and POST requests may not carry query parameters, so the parameters we check are exactly the ones Stripe acts on.
Still have a question?
We read every email, usually within a day.