Configure Stripe
Create a Stripe restricted key and connect your payments to Order Invoicer
Prerequisites
Before you begin, make sure that:
- You have an active Stripe account (test or live mode)
- You have administrator access to the Stripe dashboard
- Your Stripe account has accepted the Stripe Terms of Service (otherwise Payment Links are not enabled)
Order Invoicer uses a restricted API key (prefix rk_test_ or rk_live_). No Stripe Connect app installation is required — you keep full control of the key and can revoke it at any time from your Stripe dashboard.
Create a restricted key
Go to the Stripe API keys
- Log in to dashboard.stripe.com
- Select the account (or sandbox) to connect
- Go to Developers > API keys
- Scroll down to Restricted keys and click + Create restricted key
Give the key a name
Use a descriptive name — for example Order Invoicer — Payment Links. The name is only visible in your Stripe dashboard; it helps you find the key if you ever need to revoke it.
Enable the required permissions
Order Invoicer needs the following permissions to sync Payment Links and create the corresponding invoices:
Read
- ✅ Balance Transactions
- ✅ Charges
- ✅ Checkout Sessions
- ✅ Customers
- ✅ Invoices
- ✅ Payment Intents
- ✅ Payment Links
- ✅ Payouts
- ✅ Products
- ✅ Subscriptions
Connect — Read
- ✅ All Connect resources (to identify your Stripe account on connection)
Stripe files reading your own account under the Connect section of the key editor, even if you don't use Stripe Connect: there is no "Account" row. Order Invoicer only reads your own account.
Write
- ✅ Webhook Endpoints (Order Invoicer creates the webhook automatically on connection)
All of these permissions are required. If one is missing, Order Invoicer will reject the key with a message indicating the missing permission — simply add it and try again.
Generate and copy the key
- Click Create key
- Stripe displays the key only once — copy it immediately
- It starts with
rk_live_(production mode) orrk_test_(test mode)
The key is no longer visible after you close the window. If you lose it, create a new one and revoke the old one.
Enter the key in Order Invoicer
- In Order Invoicer, select Stripe as the e-commerce platform
- Paste the restricted key into the Restricted API key field
- Click Next
Order Invoicer will:
- Verify the key by reading your Stripe account information
- Automatically register a webhook on your Stripe account (to receive the
checkout.session.completed,checkout.session.async_payment_succeededandcharge.refundedevents) - Trigger a first sync of your existing Payment Links
To sync the Stripe payouts of a store you have already connected (WooCommerce, PrestaShop or Wix), open Payouts → Payment providers on the connector, click Connect on the Stripe card, paste the key and save. The form lists the required permissions. If your orders are already paid through Stripe, the card shows first, under Suggested for this connector.
Troubleshooting
"The key is not recognized" / Invalid credentials
- Check that the key indeed starts with
rk_test_orrk_live_(publishable keyspk_…and secret keyssk_…do not work for this flow) - Make sure you copied the complete key, with no leading or trailing spaces
- Check that the key has not been revoked from the Stripe dashboard
"Restricted key is missing required permissions"
The message lists the missing permissions, under the names they have in the Stripe key editor. To add them:
- Go back to Developers > API keys on Stripe
- Click Edit next to your restricted key
- Set each listed permission to the level shown (Read or Write). All Connect resources is in the Connect section: Stripe files reading your own account there, and there is no "Account" row
- Save and try the connection again in Order Invoicer
"Failed to create Stripe webhook endpoint"
The key does not have permission to write webhooks. Edit the key and enable Webhook Endpoints: Write, then try again.
Test the key manually
You can verify that a restricted key works with cURL:
curl https://api.stripe.com/v1/account \
-u "rk_test_votre_cle:"A JSON response describing your account (with "id": "acct_...") confirms that the key is valid and has the All Connect resources: Read permission.
Security
- The restricted key is stored encrypted on the Order Invoicer side
- You can revoke it at any time from Developers > API keys on Stripe — the connection will be cut off immediately
- Order Invoicer performs no write operations on your Stripe other than the initial creation of the webhook
Support
If you run into difficulties:
- See the troubleshooting section above
- Check the Stripe status at status.stripe.com
- Contact our support:
contact@orderinvoicer.com