Scan with a restricted read-only key
A restricted key only has the permissions you choose. With the settings below it can read the data the scan needs and nothing else: it can't charge, refund or change anything.
1. Open your API keys
In the Stripe Dashboard go to Developers → API keys, or open dashboard.stripe.com/apikeys.
2. Create a restricted key
Click Create restricted key. If Stripe asks how you'll use it, pick the option that lets you set permissions yourself. Name it SavedMRR scan.
3. Set these to Read, everything else to None
- InvoicesRead
- ChargesRead
- SubscriptionsRead
- PaymentMethodsRead
- CustomersRead
Customers is only used to find a subscription's default card when the subscription has none of its own.
4. Copy the key and paste it below
It starts with rk_live_. Never paste a secret key (sk_): we'll refuse it.
When the scan finishes, delete the key in Developers → API keys. How we handle keys