Vercel Introduces Managed Stripe API Keys for Better Security

What happened

Vercel Connect now enables users to create separate restricted Stripe API keys for each agent or task. This new feature is part of an updated Stripe connector setup process.

Users can choose the Managed API Key option when setting up a Stripe connector through Vercel Connect. Vercel generates and manages the Stripe API key within the user's Stripe account, assigning it specific permissions based on the user's selection.

Why it matters

The default Stripe secret key provides full access to the account, which is commonly used by most apps and agents. Per-agent keys limit access to only what is necessary for each agent's specific task, such as read-only access to charges for a daily revenue report agent.

Key details

Vercel handles the creation and storage of the API key, eliminating the need to manually paste a secret key. Existing methods for connecting to Stripe, such as MCP and bring-your-own API keys, remain unchanged.

To start using the Stripe connector, users can add it from the connectors directory or use the CLI, which opens the browser for setup completion. Users are encouraged to add the Stripe connector or refer to the documentation for further information.