Stripe

Overview
How to connect
Automated checks
Useful links

DSALTA connects to Stripe using read-only API access to collect compliance evidence automatically. Data feeds into your Data Library modules.

Read-only access. DSALTA never modifies, creates, or deletes resources in your Stripe account.

What you’ll see. Stripe exposes no API that lists dashboard members, so DSALTA’s Access page shows the connected account owner as a single row (the account that authorized the connection) rather than a list of individual people. That single row is what every Stripe sync produces, whatever identity setup your Stripe account uses. Because of this, the access checks below — which match Stripe users to your People page by email — may not resolve automatically. Treat the Access list as the connected account and confirm its owner manually. DSALTA also syncs your Products and Webhook endpoints to the Inventory page.

DSALTA collects this integration’s data when you connect it — you can refresh it at any time with Sync from integrations on the Integrations page. The compliance checks below re-run once a day at 02:00 America/New_York.

What DSALTA reads

DSALTA reads the Stripe account that authorised the connection — its account name, contact email and creation date, a single row on your Access page. Stripe exposes no API that lists dashboard members, so there is no roster to read, and that one row is always labelled an active Owner; and your Stripe resources, which appear on your Inventory page.It calls these Stripe endpoints:

/v1/account
/v1/products
/v1/webhook_endpoints

Every request is a read. DSALTA has no code path that creates, modifies, or deletes anything in your Stripe environment.

Troubleshooting

Integration shows Disconnected

There is no Reconnect button. Open Integrations → Connected, click Manage on the Stripe card, and check the Status tab — it shows either Connected and working properly or Connection issues detected. To restore a broken connection you must Disconnect and connect again, which permanently deletes the data and tests collected from Stripe. This can happen if the restricted API key was rolled or revoked in the Stripe Dashboard.

Data is not syncing

Confirm the restricted key is still active and carries Read access on Account (Basic Business Contact Information), Products, and Webhook endpoints, then click Sync from integrations on the Integrations page (Connected tab) — it refreshes every connected integration at once.

The Access page is empty

The restricted key is missing the Account → Basic Business Contact Information (Read) permission. Edit the key in the Stripe Dashboard to grant it — the key value does not change, so there is nothing to re-enter in DSALTA. Then click Sync from integrations on the Integrations page. Do not disconnect: that would delete the Stripe data and tests already collected.

Start in DSALTA

Open Integrations in the DSALTA sidebar, find Stripe, and click Connect to open the connect panel.

Create a restricted Stripe API key

In the Stripe Dashboard, go to Developers, then API keys, and select Create restricted key. A test-mode key (rk_test…) works; no paid or enterprise plan is required.

Test mode and live mode hold separate data and separate keys — an rk_test_ key reads only your test-mode products and webhook endpoints, so the Inventory page will show test data. If you want your live account’s resources, switch the dashboard to live mode before you create the key; it will then start with rk_live_.

Stripe sends a two-factor verification prompt while you create the key, and in live mode it shows the key value exactly once — “Save the key value. You can’t retrieve it later.” Copy it straight into DSALTA’s credential window; if you lose it, create another restricted key. (Test-mode and sandbox keys stay visible on the API keys page, which is why the screenshots show them in full.)

If your dashboard shows a sandbox switcher rather than a Test mode toggle, the key you create inside a sandbox reads that sandbox only. Keys are per-mode: objects created in one mode are not visible from the other.

Stripe Dashboard settings page with the gear icon in the top bar and the Developers entry under Personal settings both outlined

Stripe Developers page on the API keys tab, showing the Restricted keys table with two rk_test keys and the Create restricted key button, plus the Standard keys section below

Grant read permissions on the key

Grant the key Read access on these resources:

Account → Basic Business Contact Information (Read) — required to show the connected account owner on the Access page. Without this exact permission, the Access page will be empty.
Products and Webhook endpoints — populate the Inventory page.

With Account → Basic Business Contact Information granted, the Access page shows the connected account owner as a single row, and every later sync refreshes that same row. Review individual Stripe dashboard members in the Stripe Dashboard.Products → Read is not optional. DSALTA validates the credential by listing one product, so a key without Products read fails at the Connect step even if every other permission is set. Account → Basic Business Contact Information and Webhook endpoints only affect what appears afterwards (the Access row and the Inventory list).

Paste the key

Paste the restricted key in the next step.

Finish in DSALTA

Paste the restricted key into the secure credential window when it opens. DSALTA lists one product to verify the key, then completes the connection — there is nothing further to enter in the panel.

Once connected, Stripe appears on the Connected tab and the checks below begin reporting after the first sync.

Each check below re-runs once a day, at 02:00 America/New_York, while this integration is connected. Click any check for step-by-step remediation guidance.

Check	Severity	What it verifies
User access to Critical System should be valid	Info	Checks that everyone with Stripe access is an active employee on the People page.
Offboarded users should not have active access	High	Checks that offboarded employees no longer have active Stripe access.

Topic	Link
Setup	Stripe: Restricted API keys
General	Stripe website
DSALTA	Connection error messages

Getting Connected

Identity Providers

Cloud Infrastructure

Code Repositories

Security & Monitoring

Databases

SaaS & Productivity

What DSALTA reads

Troubleshooting

​What DSALTA reads

​Troubleshooting

What DSALTA reads

Troubleshooting