Documentation

Stripe verification setup

RevenueShot never lets users type MRR. Metrics are calculated from your Stripe account using a restricted API key you create. You need an account so we can save that key (encrypted), refresh metrics later, and enforce plans.

Why sign up?

  • We store your restricted key encrypted and re-sync on demand
  • One card is powered by one restricted key (one business)
  • Multiple SaaS products should each use their own key - not the same one
  • Pro unlocks clean exports, all 12 themes, and unlimited saves
1

Open Stripe API keys

Go to the Stripe Dashboard. Prefer test mode while learning the flow - test metrics are labeled Stripe TEST MODE on the card and cannot join the live leaderboard. Switch to live keys when you want real revenue proof:

dashboard.stripe.com/apikeys

You must be logged into the Stripe account that owns your product subscriptions.

2

Create a Restricted key (recommended)

  1. Click Create restricted key
  2. Name it something like RevenueShot read-only
  3. Under permissions, set only what we need (see table below). Leave everything else as None
  4. Create the key and copy it once (Stripe may not show it again)
ResourcePermission
SubscriptionsRead
CustomersRead
InvoicesRead
BalanceRead (optional, helps validation)

Do not grant Write, Charges write, or payouts. RevenueShot only needs to read subscription state.

3

Sign in to RevenueShot

Restricted keys are saved to your account (encrypted). Without signup we couldn't refresh metrics or keep each card tied to one key.

4

Paste the key in the editor

  1. Open the editor
  2. Paste the key starting with rk_live_ or rk_test_ (or sk_ if you must)
  3. Click Connect & verify
  4. We calculate MRR from active subscriptions, ARR = MRR × 12, customers from unique sub customers, growth vs prior month invoices
5

Export & upgrade

  • Free: limited watermarked exports + 1 saved card (trial)
  • Pro: unlimited clean PNGs, no watermark, all themes
  • Same Stripe key cannot power unlimited free accounts

FAQ

Is my secret key safe?
Yes. Restricted keys are encrypted at rest on the server. We never show the full key again - only the last 4 characters.
Can I revoke access?
Yes - delete the restricted key in Stripe, or use Disconnect in RevenueShot Settings / Editor.
Why not allow typing MRR?
Because vanity metrics destroy trust. Cards from RevenueShot are only valuable if numbers are Stripe-backed.
Test mode vs live
Use rk_test_ while trying the product. Switch to rk_live_ for real public cards.