--- title: Even Stripe Makes You Click a Button to Get an API Key description: Stripe, despite its reputation for excellent developer experience, has no public API endpoint to programmatically mint secret or restricted API keys — they... canonical: https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Even Stripe Makes You Click a Button to Get an API Key | daily.dev og:description: Stripe, despite its reputation for excellent developer experience, has no public API endpoint to programmatically mint secret or restricted API keys — they... og:url: https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90 og:image: https://api.daily.dev/og/posts/of7HrQm90.png og:image:alt: Even Stripe Makes You Click a Button to Get an API Key og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Even Stripe Makes You Click a Button to Get an API Key **[API Evangelist](https://daily.dev/sources/apievangelist)** · 10 min read · 0 upvotes · 0 comments ## Summary Stripe, despite its reputation for excellent developer experience, has no public API endpoint to programmatically mint secret or restricted API keys — they must be created manually in the Stripe Dashboard. An app-managed keys preview exists but is scoped to Stripe Apps, requires manifest permissions and Stripe review, and won't issue unrestricted keys even at general availability. The one programmatic path Stripe does offer is Stripe Connect, where POSTing to /v1/accounts creates a connected account, though that account still can't transact until dashboard-based onboarding completes and its key still must be minted manually. A companion Node.js script verifies a pasted STRIPE_SECRET_KEY via GET /v1/account and optionally creates a Connect account, but the author argues Stripe could easily fix this by exposing its existing restricted-key permission model through a public endpoint. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Can I create a Stripe secret API key (sk_ or rk_) through the API instead of the dashboard? No, Stripe has no public endpoint to mint your own sk_ or rk_ secret key; keys are created manually in the Stripe Dashboard. An app-managed keys preview exists but is scoped to Stripe Apps, requires a manifest permission and a Stripe review, and even at general availability won't issue unrestricted keys. _Teams automating Stripe integrations for AI agents can track workarounds and API changes like this on daily.dev._ ### What is the one programmatic onboarding path Stripe offers for creating accounts without a dashboard? Stripe Connect lets you POST to /v1/accounts to create a connected account (for example an Express account) that can eventually transact, returning an acct_ id. However, that account still cannot transact until someone completes onboarding manually, and its restricted API key must still be minted in the Stripe Dashboard rather than via the API. _Developers wiring up Stripe Connect for agent-driven workflows can follow onboarding gaps like this via daily.dev._ ### How can a script verify which Stripe account a secret key belongs to programmatically? Calling GET /v1/account with the secret key as a Bearer token or Basic auth username returns the account id, whether it's in live or test mode, and whether charges and payouts are enabled. This is the one identity check Stripe supports for a pasted key without any human-in-the-loop OAuth flow. _Anyone scripting Stripe identity checks for agent tooling can keep up with API authentication nuances on daily.dev._ ## Similar posts on daily.dev - [Slack Can Actually Mint App Credentials From a Script, If You Survive the Bootstrap](https://daily.dev/posts/slack-can-actually-mint-app-credentials-from-a-script-if-you-survive-the-bootstrap-6xzzokqtq) · API Evangelist · 0 upvotes · 0 comments - [PayPal Lets You Mint a Token, But Not Register the App](https://daily.dev/posts/paypal-lets-you-mint-a-token-but-not-register-the-app-nq46w8zpd) · API Evangelist · 0 upvotes · 0 comments - [A rant about APIs](https://daily.dev/posts/a-rant-about-apis-tfuw9usmm) · Lobsters · 3 upvotes · 0 comments - [Postman Sells API Tooling but Still Makes You Click Generate API Key](https://daily.dev/posts/postman-sells-api-tooling-but-still-makes-you-click-generate-api-key-medjvleic) · API Evangelist · 1 upvotes · 0 comments - [Getting a Gemini API key is an exercise in frustration — Ankur Sethi's Internet Website](https://daily.dev/posts/getting-a-gemini-api-key-is-an-exercise-in-frustration-ankur-sethi-s-internet-website-fkohr4nhb) · Hacker News · 2 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#architecture](https://daily.dev/tags/architecture), [#oauth](https://daily.dev/tags/oauth), [#stripe](https://daily.dev/tags/stripe) [View this post on daily.dev](https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Even Stripe Makes You Click a Button to Get an API Key","url":"https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90"},"datePublished":"2026-08-13T10:21:08.008Z","dateModified":"2026-09-14T08:06:13.642Z","description":"Stripe, despite its reputation for excellent developer experience, has no public API endpoint to programmatically mint secret or restricted API keys — they...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d757e337a87da26d23d822cca443efad?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d757e337a87da26d23d822cca443efad?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"API Evangelist","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"API Evangelist","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/a36244ae67bc4f41a605f780267ecb5f","url":"https://daily.dev/sources/apievangelist"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,architecture,oauth,stripe","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"API Evangelist","item":"https://daily.dev/sources/apievangelist"},{"@type":"ListItem","position":3,"name":"Even Stripe Makes You Click a Button to Get an API Key"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/even-stripe-makes-you-click-a-button-to-get-an-api-key-of7hrqm90#faq","mainEntity":[{"@type":"Question","name":"Can I create a Stripe secret API key (sk_ or rk_) through the API instead of the dashboard?","acceptedAnswer":{"@type":"Answer","text":"No, Stripe has no public endpoint to mint your own sk_ or rk_ secret key; keys are created manually in the Stripe Dashboard. An app-managed keys preview exists but is scoped to Stripe Apps, requires a manifest permission and a Stripe review, and even at general availability won't issue unrestricted keys. Teams automating Stripe integrations for AI agents can track workarounds and API changes like this on daily.dev."}},{"@type":"Question","name":"What is the one programmatic onboarding path Stripe offers for creating accounts without a dashboard?","acceptedAnswer":{"@type":"Answer","text":"Stripe Connect lets you POST to /v1/accounts to create a connected account (for example an Express account) that can eventually transact, returning an acct_ id. However, that account still cannot transact until someone completes onboarding manually, and its restricted API key must still be minted in the Stripe Dashboard rather than via the API. Developers wiring up Stripe Connect for agent-driven workflows can follow onboarding gaps like this via daily.dev."}},{"@type":"Question","name":"How can a script verify which Stripe account a secret key belongs to programmatically?","acceptedAnswer":{"@type":"Answer","text":"Calling GET /v1/account with the secret key as a Bearer token or Basic auth username returns the account id, whether it's in live or test mode, and whether charges and payouts are enabled. This is the one identity check Stripe supports for a pasted key without any human-in-the-loop OAuth flow. Anyone scripting Stripe identity checks for agent tooling can keep up with API authentication nuances on daily.dev."}}]} ```