Signing

The Stripe plugin requires two keys to validate all communication with Stripe:

• Secret Key: authenticates API requests.
• Webhook Signing Secret: verifies incoming webhook events.

Once both keys are added in the plugin settings, Mautic will be able to trust that events are real and not fraudulent.

Secret Key #

The Secret Key is your private credential used by the plugin to communicate with Stripe’s API.
You will need one for Test mode and one for Live mode:

1. Go to your Stripe Dashboard.
2. Navigate to Developers > API keys.
3. Under Secret Key, click Reveal key and copy it.
   • If you are in Test mode, you will see a sk_test_... key.
   • If you are in Live mode, you will see a sk_live_... key.

Now, you need to insert into your Mautic:

1. Open Settings > Plugins > Stripe Plugin.
2. Paste the key in the Secret Key field.

Webhook Signing Secret #

The Webhook Signing Secret is used to confirm that every event received at your Mautic endpoint was truly sent by Stripe. To get it:

1. In your Stripe Dashboard, go to Developers > Webhooks.
2. Open the endpoint that points to your Mautic instance (e.g. https://yourmautic.com/stripe/webhook).
3. Scroll to Signing secret, click Reveal, and copy the value (whsec_...).

Now, you need to insert into your Mautic:

1. Open Settings > Plugins > Stripe Plugin.
2. Paste the key in the Webhook Signing Secret field.

Activating the Plugin #

1. In Mautic, go to Settings > Plugins > Stripe Plugin.
2. Paste both keys: Secret Key and Webhook Signing Secret
3. Choose the correct Mode (Test or Live).
4. Enable the plugin and Save.