4 ms·

Thanks. Call me old fashioned but I don't feel comfortable giving a 3rd party access to my Stripe account. 1) Is it open source? or 2) Does Stripe have an API

• billycoover 14y ago
  1) No it's not open-source but I do plan on opening up the Stripe lib I've built. 2) Negative. That would be a great option but some Pay Pad users want the full featured access, including accepting payments from the device. I think about this a lot... For example, from Pay Pay, what would be the ramifications if someone stole your phone and had access to your Stripe account? Well there are three things that are pretty scary. They could 1) add new charges to your existing customers 2) refund existing customers, and 3) get names and email addresses of your customers. Could you prevent this? Yes. Password protect your phone. If it does get stolen, go to Stripe and revoke access to the third party apps. But I want to do better. One user left a review the other day and asked for the ability to "lock" the app. I haven't decided yet how I'll implement it but I do want to add an "optional" locking feature that adds yet another layer of protection to your Stripe account from the Pay Pad app. Ping me if you have any thoughts on alternatives.
• jonhernandez 14y ago
  In regards to #2: It's possible for people to create Connect applications that are read-only: https://stripe.com/docs/connect/reference https://stripe.com/docs/connect/reference see the `scope` under request parameters.