LaFlemm

[red hatch]

Unfortunately not. The only other way I could think to do that would be if the user created a secret (or maybe in this case a restricted key) and sent it to you. Unfortunately we don't have that fine grained of permission configurations for Connect so at the moment the only option is to connect and have access to much of their account data.

That being said platforms are restricted from seeing particularly sensitive data so flagging that could be reassuring to users if that is the issue you are trying to address.

[vague lagoon]

Yes this could work. Accounts linked to us via connect can also review our API logs right? So they can see we are not using their data incorrectly

[red hatch]

Good question. I believe so, they can definitely see the logs that you make in their request logs, though I forget if there is a way to filter it just for your platform

Also I don't know how I forgot but we do have Stripe apps which I do actually think have those more fine grained controls. Have you considered building this as an app? https://stripe.com/docs/stripe-apps

I am looking in to the permissions there to confirm

[vague lagoon]

I haven't looked into Stripe Apps yet, checking now 🙂

[red hatch]

https://stripe.com/docs/stripe-apps/reference/permissions

[vague lagoon]

Creating an app seems more complicated but that permissions feature is what I need