Connect Stripe without handing over your account.
Your business owns the Stripe account and receives customer funds directly. QuoteSpry never needs your Stripe password, card details, or full dashboard access.
1. Use your own verified Stripe account
Sign in directly at stripe.com. Confirm the legal business, bank account, support contact, statement descriptor, refund policy, and live-mode activation. Do not create or share a login for QuoteSpry.
2. Create the minimum required key
In Stripe’s Developers area, create a restricted live key that can create and retrieve Checkout Sessions and the related payment records required for deposit reconciliation. Start with the narrowest permissions available; expand only when a tested function requires it.
3. Transfer secrets safely
Never email, text, DM, or place a secret in the prospect workbook. Add the restricted key and webhook signing secret directly through the hosting secret manager during a screen-share or use a reputable expiring secret-sharing link. Anyone who sees a secret should rotate it immediately.
4. Configure and test the webhook
Use the QuoteSpry deployment’s /api/stripe/webhook endpoint and subscribe only to checkout.session.completed and checkout.session.async_payment_succeeded. Run a test-mode checkout first, confirm the quote becomes paid once, then repeat a low-value controlled live test.
5. Launch checklist
Confirm test keys are removed from live service, the live key is restricted, the webhook signature verifies, the payment lands in the client’s Stripe account, duplicate payment attempts are prevented, and refund responsibility is clear in the client’s own customer terms.