Give us access to your Stripe account

If you are accepting payments, donations, or subscriptions through your website, Stripe is likely the engine powering those transactions. To connect Stripe to your website securely, we need enough access to authorize that connection and to set up or check the webhooks Stripe uses to tell your site when a payment goes through.

Step-by-step instructions

Stripe controls what each team member can do through roles. Developer is the role built for this work: Stripe describes it as the role "for developers who need to set up a Stripe integration". It is a technical role rather than a locked-down one, so it's worth reading the questions below before you send the invite.

Common questions

Can you see my bank account or transfer funds?

Developer is a broader role than its name suggests, so here's the precise answer rather than a reassuring one. Stripe publishes only "some of" what each role can and can't do, so treat these as the headlines, not the full list.

Stripe lists what a Developer can't do: add or edit your bank account details, change your payout schedule, invite or remove team members, or change the account owner.

Stripe also lists what a Developer can do: create and delete API keys, view events and logs, view your balance and payouts, refund payments, and pay your balance out to your existing bank account.

We only use it for the integration work, and every action is logged against our own login. But if that scope is more than you want to hand over, tell your project lead — Stripe has narrower roles, and we can work out the smallest one that still lets us finish the job.

Why do you need Stripe access if WooCommerce is already installed?

WooCommerce's official Stripe extension connects by signing in to Stripe: you click Create or connect an account in the extension's settings and Stripe's own site handles the authorization. Being a team member on your Stripe account is what lets us run that step and check the connection is healthy. Recent versions of the extension set up the webhooks that tell your store about a payment automatically when it connects, and they can be reconfigured from the extension's settings if they ever go missing. Some other plugins and custom integrations still need API keys generated in your Stripe dashboard instead.

How do I remove your access when the integration is done?

Go back to Team and security → Team, click the overflow menu (…) in our row, and remove us. You can also open our profile and click Remove member. Access ends as soon as you do it.

Removing a team member does not switch off API keys. Stripe's own advice is to "rotate keys when team members with access to the keys leave your organization", so if keys were part of your setup, either rotate them yourself from the API keys page or tell us and we'll plan the swap with you.

Related guides

• Why we ask for access (and why it's safe)
• Delegate access vs. sharing a password
• How we keep your logins safe
• How to revoke our access later
• Access checklist for a new project
• Access directory (A–Z)

Learn more

• Stripe Docs — User roles
• Stripe Docs — Start a team