To connect Stripe to Combidesk, we recommend using a restricted key instead of full (secret) API key: a key that only has the permissions Combidesk actually needs. This is safer, since the key won't have access to parts of your Stripe account that aren't relevant to the integration. This article explains how to create such a restricted key and which permissions to set.
Step 1 — Go to API keys in Stripe
Log in to your Stripe Dashboard.
Go to Developers → API keys.
Click Create restricted key.
Step 2 — Give the key a recognizable name
Give the key a clear name, for example Combidesk integration, so you can easily identify what it's used for later in Stripe.
Step 3 — Set the correct permissions
Combidesk needs the following permissions. Set each of the resources below to the indicated permission — you can leave all other resources set to None.
Core
Resource | Permission |
Account data | Read |
Balance transactions | Read |
Charges and Refunds | Read |
Customers | Read |
Payouts | Read |
Products | Read |
Shipping Rates | Read |
Billing
Resource | Permission |
Credit Notes | Read |
Invoices | Write |
Tax Rates | Read |
Note: Invoices requires Write access, not just Read. This is not a mistake. Combidesk can mark invoices as paid in Stripe. Without Write access on Invoices, this won't work, and Combidesk won't be able to automatically mark invoices as paid. All other Billing and Core resources remain read-only; Combidesk doesn't need write access to those.
Step 4 — Save the key
Click Create key.
Stripe shows the key only once. Copy it right away — you won't be able to view it again later.
Store the key somewhere safe until you enter it in Combidesk.
Step 5 — Connect the key in Combidesk
Go to your Combidesk dashboard.
Start or open the Stripe integration.
Paste the restricted key into the designated field and save.