Get Your Stripe API Key for airsource
Last updated: 2026-05-23
How to obtain a Restricted API Key so airsource SaaS can connect to your Stripe account. About 5 minutes in the Stripe Dashboard — no coding required.
Key types
| Key type | Recommended | Purpose |
|---|---|---|
| Restricted Key | Strongly recommended | Can be locked down to read-only — safer |
Secret Key (sk_live_...) |
Not recommended | Full access — high risk if leaked |
airsource runs with a read-only Restricted Key.
Steps
Step 1: Sign in to the Stripe Dashboard
Sign in at https://dashboard.stripe.com/login.
Step 2: Open the API keys page
- In the left sidebar, click Developers > API keys
- Scroll down to the Restricted keys section on the right
- Click + Create restricted key
Step 3: Configure permissions
Key name: airsource SaaS - Read Only
Under Permissions, set the following resources to Read only (leave everything else as "None"):
| Resource | Permission |
|---|---|
| Customers | Read |
| Subscriptions | Read |
| Invoices | Read |
| Charges | Read |
| Products | Read |
| Prices | Read |
| Balance | Read |
Never grant Write permission. This guarantees that, even if the key leaks, no one can modify your Stripe data.
Step 4: Create and copy
- Click Create key at the bottom of the page
- A string starting with
rk_live_...is displayed - Click Copy (the key is never shown again once you close this screen)
- We recommend temporarily storing it in a password manager
Step 5: Register with airsource
Open https://airsource.io/onboard and paste the Restricted Key.
To verify in Test mode first, toggle "Test mode" in the top-right of the Stripe Dashboard and repeat the steps above. Test keys start with
rk_test_....
Troubleshooting
Q. I can't find the Restricted key creation option
- This may be due to a Stripe Connect-related restriction
- Contact Stripe Support and ask them to "enable restricted keys on my individual account"
Q. I lost my key
- Open the Stripe Dashboard, Revoke the existing key, and create a new one (5 minutes)
- Remove the old key in airsource and register the new one
Q. What data does airsource fetch?
- Customer list (email, name, creation date)
- Subscription list (plan, MRR, status)
- Invoice list (amount, payment date)
- All read-only; airsource never writes to your Stripe account
Security notes
- airsource stores the restricted key in an encrypted JSONB column in Supabase
- It is only accessible under the service_role JWT (the anon key cannot read it)
- The key is never written to Sentry, GitHub Actions, or Vercel logs
- The key is deleted within 24 hours of account closure