Stripe
Read live-account webhook and event metadata using a restricted key; no payment write access is needed.
Create a restricted live key
Create a dedicated restricted live-mode Stripe key with Read access to Account, Webhook Endpoints and Events. Do not grant write permissions.
Enter the expected acct_ account ID in Sparta. This evidence connection is separate from purchasing Sparta and from the marketing site's payment link.
Define expected endpoints
Configure the production webhook endpoint IDs, approved exact HTTPS hosts, expected event types and approved API versions.
Run the connection check and collect evidence. Inspect disabled endpoints, configuration differences and the available delivery-event metadata.
Understand the evidence window
Stripe's Events API history is limited to 30 days. Collect continuously for the required review period; an older collection gap cannot be reconstructed from that API alone.
The connection reads minimized metadata. It does not establish Stripe Dashboard administrator access, MFA, successful payment processing or a complete audit-period record.