Give Each Stripe Helper Only the Access It Needs

Vercel Connect now gives teams another way to connect apps to Stripe. They can choose a separate API key for each task or helper. An API key lets software use a service with certain access rights. The new option is called Managed API Key in the connection settings. Vercel creates the key inside the team's Stripe account.

The main change is control over what each key can do. Stripe's default secret key gives full access to the account. But a helper may need only a small part of that access. With the new option, the team chooses only the rights it needs. A daily report helper can receive permission just to read charges. A helper for new customers can receive permission to write customer information.

Vercel also creates and stores the key, so nobody needs to paste it. Teams can replace a key through the settings for that connection. They do not need to put out a new app version. The old key can remain valid for up to 24 hours. This gives the team time to move over to the new one.

To begin, teams add a Stripe connection and select Managed API Key. They choose its rights and attach the connection to their project. The app can then get the key when it runs. Existing ways to connect are still available and have not changed. The update gives each helper access that matches its own job. It also brings key creation and storage into the connection setup.