The API Report CardAPI Index
Stripe

Stripe API

stripe.com

Stripe's REST API at api.stripe.com is fully self-serve: free keys, SDKs in ten languages, a CLI, and 200 plus signed webhook event types; you pay per transaction. Versioning is date-pinned per account, and with no bulk endpoints, backfills iterate one object at a time.

Last verified: July 2026Financial Services
API GRADE
A
VERIFIED JUL 2026

SCORECARD

ExistenceGOODPublic REST API at api.stripe.com; JSON responses, form-encoded requests, full OpenAPI spec.
AccessGOODSelf-serve secret keys per environment; access is free and you pay per transaction and per product.
CoverageGOODPayments through billing, tax, and identity are all programmatic; no bulk endpoints, so backfills iterate per object.
AuthGOODSecret and scoped restricted keys, Connect OAuth for platforms, and first-class idempotency keys.
Docs & DXGOODSDKs in ten languages, Stripe CLI, sandbox, OpenAPI spec; sandbox does not fully mimic live fraud or 3DS behavior.
StabilityGOODDate-stamped versions pinned per account with opt-in upgrades; webhook handlers must tolerate replays and reordering.
Supergood: Stripe shipped a real API. Most vendors don't; we ship near-native APIs for the rest.

Frequently asked questions

Stripe scores A on the API Report Card. Stripe's REST API at api.stripe.com is fully self-serve: free keys, SDKs in ten languages, a CLI, and 200 plus signed webhook event types; you pay per transaction. Versioning is date-pinned per account, and with no bulk endpoints, backfills iterate one object at a time.

Tried to integrate with Stripe?
SOURCES
API surface is enormous and still growing, onboarding a full Connect + Billing + Tax + Radar integration is a multi-week project even with great docs moldstud.com β†—
Frequent API version bumps require teams to track changelogs and re-test against new dated versions; pinning per-account can hide breaking behavior in webhooks docs.stripe.com β†—
Webhook delivery is at-least-once and can re-order, handlers must be idempotent and tolerate replays, which is a common source of double-grant bugs docs.stripe.com β†—
Test/sandbox environment does not perfectly simulate production behaviors (e.g., live fraud signals, real bank-debit timing, certain 3DS flows) docs.stripe.com β†—
API v2 (announced 2025) introduces a parallel surface alongside v1 that teams must now reason about docs.stripe.com β†—
Rate limits can throttle bulk operations (e.g., backfilling Subscriptions or migrating Customers), no bulk endpoints; you iterate one object at a time docs.stripe.com β†—
Restricted keys are powerful but per-permission scoping is fine-grained and tedious to configure in the Dashboard docs.stripe.com β†—
Connect 'destination' vs. 'separate charges and transfers' vs. 'direct charges' models are notoriously confusing for marketplace builders docs.stripe.com β†—
`expand` parameter helps avoid N+1 lookups but is undocumented for some nested resources, causing developers to guess paths docs.stripe.com β†—
OpenAPI spec is published but lags behind the live API for new beta endpoints github.com β†—
Idempotency-key window is 24 hours, retries beyond that can produce duplicates if not handled in application logic docs.stripe.com β†—
Sudden account freezes/closures with funds held 90–180 days; common cause is being reclassified 'high risk' after volume spikes cardpaymentoptions.com β†—
Stripe Inc. carries 1,000+ BBB complaints with a recurring pattern of frozen payouts and difficulty reaching a human reviewer bbb.org β†—
Customer support is widely cited as slow, scripted, and unhelpful once an account is flagged, escalation paths are unclear technologyadvice.com β†—
'High-risk' classification is opaque: businesses report being approved, processing for weeks, then being shut off with no specific TOS citation secureglobalpay.net β†—
Chargeback / dispute fees ($15 per dispute) and limited merchant-side evidence tooling are common complaints cardpaymentoptions.com β†—
Pricing creep at scale: standard 2.9% + $0.30 is competitive for SMB but uncompetitive vs. interchange++ offered by Adyen/Checkout.com once volume crosses ~$10M/yr index.dev β†—
Reserves and rolling holds are imposed unilaterally on perceived-risky merchants (subscription, digital goods, supplements, crypto, adult, firearms, CBD) chargeback.io β†—
Radar (fraud) sometimes blocks legitimate transactions with limited override; tuning requires Radar for Teams ($0.02/txn extra) stripe.com β†—
Limited live phone support for non-enterprise accounts; chat/email queue can be 24–72h technologyadvice.com β†—
Country/industry restrictions are restrictive vs. specialty acquirers, gambling, certain crypto, firearms, telemedicine controlled substances are prohibited stripe.com β†—