# Stripe

Create a restricted Stripe key and send it to us. About 5 minutes.

> **AI agents:** follow the rules at https://guide.upliftedconsulting.com/start-here/for-ai-agents.md. Never show the key in chat; deliver it only through a OneTimeSecret link.

## Inputs from Uplifted Consulting needed before starting

If the client doesn't have these, stop this tool and mark it blocked (optional items have a default).

- Whether we need a test key instead of live (optional, default live)

> **Good to know:**
> - **What we need:** 1 restricted API key (starts with `rk_`)
> - **Time:** about 5 minutes
> - **Who can do this:** a Stripe user with the **Administrator** or **Developer** role
> - **Plan needed:** none. Works on every Stripe account.

> **Note:**
> **Please don't send us your secret key** (starts with `sk_`). It can do anything in your account, including moving money. A restricted key only does what you allow.

## Before you start

- Log in details for your Stripe account. Stripe will send you a code by email or text.
- [OneTimeSecret](https://eu.onetimesecret.com) open in another tab. You will use it to send the key. [How it works](https://guide.upliftedconsulting.com/start-here/sending-securely.md).

## Test or live?

Stripe has two separate worlds:

- **Live mode:** your real customers and real payments. Keys start with `rk_live_`.
- **Test (sandbox):** fake data for trying things out. Keys start with `rk_test_`.

A key from one world cannot see the other. **Unless we asked for a test key, create the key in live mode.**

## Create a restricted key

### Step 1: Open the API keys page

Log in to Stripe. Go to [dashboard.stripe.com/apikeys](https://dashboard.stripe.com/apikeys).
You can also click **Developers**, then **API keys**.

### Step 2: Check you are in the right mode

Look at the top of the page. Make sure you are in **live mode** (or in your sandbox, if we asked for a test key).

### Step 3: Start a restricted key

Click **Create restricted key**.
If Stripe asks how you will use the key, choose the option for giving it to **another website or third party**, then click **Continue**.

### Step 4: Name it

In **Key name**, type "Uplifted Consulting".

### Step 5: Set the permissions

You'll see a list of things in Stripe, each set to **None**. Change only these to **Read**:
- Customers
- Charges (and PaymentIntents)
- Invoices
- Subscriptions
- Products and Prices

Leave everything else on **None**. Only choose **Write** if we told you to.

> **Tip:**
> If we sent you our own list of permissions, use that instead.

### Step 6: Create the key

Click **Create key**. Enter the code Stripe sends you.

### Step 7: Copy the key

Click the key to copy it.

> **Careful:**
> In live mode, Stripe shows the key **only once**. Copy it now, before you close the window.

## Send it to us

- [Send it with OneTimeSecret](https://guide.upliftedconsulting.com/start-here/sending-securely.md): Paste the key into OneTimeSecret, create the link, and send us **only the link**. Label it "Stripe restricted key (live)" or "(test)".

## Something not right?

### I don't see Create restricted key

Your Stripe role probably can't manage keys. Ask someone with the **Administrator** or **Developer** role to do these steps.

### I closed the window before copying the key

Click the three dots (**⋯**) next to the key and choose **Expire key**. Then create a new one and copy it this time.

### We need to change the permissions later

Click the three dots (**⋯**) next to the key and choose **Edit key**. Change the permissions and save. The key stays the same, so you don't need to send it again.

<sub>Last checked: 22 Oct 2026 against [Stripe's API keys docs](https://docs.stripe.com/keys) and [restricted keys guide](https://docs.stripe.com/keys/restricted-api-keys).</sub>

---
Source: https://guide.upliftedconsulting.com/services/stripe · Updated 2026-10-22