disruption 🤌

“stolen” is such an exaggerated misrepresentation…news organizations should really do better. When you steal something from someone, the owner loses access to it. She just liberated public research.

Having had a cursory look through the docs about Stripe Connect, it looks like you’re not doing business directly with stripe anymore(?).

These plugins you’re using are acting as a “Platform” in the below diagram and make API requests on your behalf with their own Stripe Secret Key and your account id [0].

So I guess the credentials you’re sharing is “just” the auth credential for the platform which will then turn around and will make API calls to stripe on your behalf.

The way I see it you’d have to implement the API calls yourself and ditch the whole Stripe Connect/Platform model in order to be in charge. Although this is probably not worth it for you because you’ll probably drown in PCI-DSS requirements

[0] https://docs.stripe.com/connect/authentication

Hehe this came up minutes after receiving an RCS phishing message pretending to be Amazon 😄