Stripe Keys

Description

General

• Documentation: https://stripe.com/docs/api
• Summary: Stripe offers payment processing software and application programming interfaces (APIs) for e-commerce websites and mobile application. As an API providing financial related information, the corresponding API key is highly sensitive.

Revoke the secret

Stripe Keys can be revoked or rolled from the Dashboard. See this documentation for more details.

Details for Stripe Keys

• Family: token

• Category: payment_system

• Company: Stripe

• High recall: True

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 12.9

• Prefixed: True

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 200
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: /v1/apple_pay/domains
• GET: /v1/application_fees
• GET: /v1/balance
• GET: /v1/billing/meters/***/event_summaries
• GET: /v1/billing/meters
• GET: /v1/charges?limit=1
• GET: /v1/checkout/sessions
• GET: /v1/climate/orders
• GET: /v1/confirmation_tokens/***
• GET: /v1/coupons
• GET: /v1/credit_notes
• GET: /v1/customers
• GET: /v1/disputes
• GET: /v1/events
• GET: /v1/files
• GET: /v1/invoices
• GET: /v1/issuing/authorizations
• GET: /v1/issuing/cardholders
• GET: /v1/issuing/cards
• GET: /v1/issuing/disputes
• GET: /v1/issuing/funding_instructions
• GET: /v1/issuing/tokens/***?expand[]=network_data
• GET: /v1/issuing/tokens
• GET: /v1/issuing/transactions
• GET: /v1/orders
• GET: /v1/payment_intents
• GET: /v1/payment_links
• GET: /v1/payment_method_domains
• GET: /v1/payment_methods
• GET: /v1/payouts
• GET: /v1/prices
• GET: /v1/products
• GET: /v1/promotion_codes
• GET: /v1/quotes
• GET: /v1/reporting/report_runs
• GET: /v1/reviews
• GET: /v1/setup_intents
• GET: /v1/shipping_rates
• GET: /v1/skus
• GET: /v1/sources/***
• GET: /v1/subscription_items/***/usage_record_summaries
• GET: /v1/subscriptions
• GET: /v1/tax/calculations/***
• GET: /v1/tax/settings
• GET: /v1/tax_ids
• GET: /v1/tax_rates
• GET: /v1/terminal/configurations
• GET: /v1/terminal/locations
• GET: /v1/terminal/readers
• GET: /v1/test_helpers/test_clocks
• GET: /v1/tokens/***
• GET: /v1/topups
• GET: /v1/transfers
• GET: /v1/webhook_endpoints
• POST: /v1/account/login_links
• POST: /v1/account_links
• POST: /v1/apple_pay/domains
• POST: /v1/application_fees/***/refunds
• POST: /v1/billing/meter_event_adjustments
• POST: /v1/billing/meter_events
• POST: /v1/billing/meters
• POST: /v1/billing_portal/sessions
• POST: /v1/charges
• POST: /v1/checkout/sessions
• POST: /v1/climate/orders
• POST: /v1/coupons
• POST: /v1/credit_notes
• POST: /v1/customer_sessions
• POST: /v1/customers/***
• POST: /v1/disputes/***
• POST: /v1/ephemeral_keys
• POST: /v1/invoices
• POST: /v1/issuing/authorizations/***
• POST: /v1/issuing/cardholders
• POST: /v1/issuing/cards
• POST: /v1/issuing/disputes
• POST: /v1/issuing/funding_instructions
• POST: /v1/issuing/tokens/***
• POST: /v1/issuing/transactions/***
• POST: /v1/orders
• POST: /v1/payment_intents
• POST: /v1/payment_links
• POST: /v1/payment_method_domains
• POST: /v1/payment_methods/***
• POST: /v1/payouts
• POST: /v1/prices
• POST: /v1/products
• POST: /v1/promotion_codes
• POST: /v1/quotes/***
• POST: /v1/reviews/***/approve
• POST: /v1/setup_intents/***
• POST: /v1/shipping_rates
• POST: /v1/skus
• POST: /v1/sources
• POST: /v1/subscription_items/***/usage_records
• POST: /v1/subscriptions
• POST: /v1/tax/calculations
• POST: /v1/tax/settings?***=0
• POST: /v1/tax_ids
• POST: /v1/tax_rates
• POST: /v1/terminal/configurations?***=0
• POST: /v1/terminal/connection_tokens?***=0
• POST: /v1/terminal/locations
• POST: /v1/terminal/readers
• POST: /v1/test_helpers/test_clocks
• POST: /v1/tokens?card[number]=1111111111111111
• POST: /v1/topups
• POST: /v1/transfers
• POST: /v1/webhook_endpoints
• POST: https://files.stripe.com/v1/files?purpose=account_requirement

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.