Stripe Integration

​

Stripe Integration

Atlas integrates with Stripe to help you manage customer purchases and payments. To connect your Stripe account to Atlas, you’ll need to provide an API key—either a secret key or a restricted key. We strongly recommend using a restricted key whenever possible. This approach aligns with our commitment to the principle of least privilege—a best practice in security that ensures systems only have access to the resources they absolutely need. Stripe API keys can be found in your Stripe API Dashboard.

​

API Key Options

1. Restricted Key (Recommended)

• Access: Only to specific resources you select.
• Pros: More secure. Limits Atlas access to only the necessary parts of your Stripe account.
• Cons: Requires a few more steps to configure. You may need to update permissions in the future as Atlas adds new features.

2. Secret Key (Full Access)

• Access: Full access to your Stripe account.
• Pros: Easiest to set up - no configuration required, and no updates required if Atlas needs access to a new resource type.
• Cons: Gives Atlas access to all your Stripe resources, including ones we don’t use. Not ideal from a security standpoint.

​

What Permissions Does Atlas Need?

When using a restricted key, Atlas currently needs write access to the following Stripe resources:

• Customers
• Checkout Sessions
• Coupons
• Invoices
• Webhook Endpoints

​

How to Connect with a Restricted API Key in Stripe?

1. Go to your Stripe API Keys page.
2. Click Create restricted key.
3. Select Providing this key to another website.
4. Name the key (e.g., Atlas Integration).
5. Set the URL to https://app.runonatlas.com/
6. Check the box for Customize permissions for this key.
7. In the permissions section, set the following to Write (All other permissions should be set to None):
   • Customers
   • Checkout Sessions
   • Coupons
   • Invoices
   • Webhook Endpoints
8. Save the key and copy it.
9. Navigate back to the Atlas integrations page .
10. Click the button for connecting to Stripe, paste your key into the modal that opens, and click Activate.

Atlas will verify that the provided key has the correct permissions and save it securely for use when charging customers.