InvoiceZip

Create a Stripe restricted key to export invoices

InvoiceZip only accepts Stripe restricted keys. This page explains which keys work and which permissions to give them.

Which keys are accepted

• Accepted: keys that start with rk_test_ or rk_live_.
• Rejected: secret keys (sk_) and publishable keys (pk_). These are blocked before any request goes to Stripe. Any other key format is rejected too.

Permissions

1. In the Stripe Dashboard, go to Developers, then API keys, then Create restricted key.
2. Invoices: Read (required).
3. Charges: Read (optional, only needed for receipts).
4. Charges, PaymentIntents, and Transfers write: None.

What InvoiceZip does with the key

• It first lists one invoice to check that the key can read invoices. If that fails, the export stops with an error.
• Then it lists that month's invoices 100 at a time and downloads each PDF.
• It never calls Stripe endpoints that create charges, payment intents, or transfers.
• The key stays in memory for that request and isn't stored. You can delete the restricted key in Stripe when you're done.