ExtendInsights connects to Stripe using a Restricted Secret Key.
We recommend creating a dedicated key with read-only permissions for reporting.
Create a Restricted Key
Sign in to the Stripe Dashboard.
Go to Developers → API Keys.
Select Create Restricted Key.
Choose Building your own integration.
Enter a name for the key. Select the scopes (see below for more help on required permissions)
Click Create Key.
Copy the Restricted Secret Key.
Use the key when creating your Stripe connection in ExtendInsights.
Recommended Read Permissions
When creating your Restricted API Key, we recommend granting only the Read permissions required for reporting. Unless your organization has a specific business need, do not enable Write permissions.
Core Revenue & Payments
Permission | Access | Why It's Needed |
Balance | Read | View account balances and related financial information. |
Charges | Read | Download payment and sales transaction data. |
Refunds | Read | Report on refund amounts, trends, and activity. |
Disputes | Read | Analyze chargebacks and disputed payments. |
Customer & Subscription Data
Permission | Access | Why It's Needed |
Customers | Read | Associate payments and subscriptions with customers. |
Invoices | Read | Report on invoices and recurring billing activity. |
Invoice Items | Read | Include line-level invoice details in reports. |
Subscription Schedules & Subscriptions | Read | Analyze recurring subscriptions, ARR, and MRR. |
Products / Prices | Read | Map subscriptions and invoices to your product catalog and pricing. |
Payouts & Transfers
Permission | Access | Why It's Needed |
Payouts | Read | Track payouts sent from Stripe to your bank account. |
Transfers | Read | Report on Stripe Connect transfers or internal fund movements, if applicable. |
Optional Permissions
These permissions are only needed if you plan to report on these areas.
Permission | Access | Why It's Needed |
Payment Intents | Read | Analyze payment attempts and conversion funnels. |
Setup Intents | Read | Report on payment method setup activity. |
Coupons & Discounts | Read | Measure discount usage and promotional campaigns. |
💡 Best Practice: Create a dedicated Restricted API Key for ExtendInsights and grant only the permissions required for your reporting needs. This follows the principle of least privilege while ensuring ExtendInsights can retrieve the data needed for analysis.