Manage access and API keys
Manage who can access a sandbox.
Use the Stripe Dashboard to grant users access to your sandbox.
Manage access
You can manage access to your sandbox using Team management in your live account’s settings, your live organisation’s settings, or directly from a sandbox or organisation sandbox.
You can assign a role directly to give a user access to a specific sandbox. You can assign a different role in a sandbox than the one the user holds in other sandboxes or in your live account or organisation.
To grant access to organisation sandboxes, you must assign the user a role in your live organisation.
Manage API keys
Stripe uses the API keys associated with a sandbox to authenticate API requests made to the applicable sandbox environment. We raise an invalid request error if you don’t include a key and an authentication error if the key is incorrect or outdated.
Use the Developer Dashboard within the sandbox to reveal, revoke, and create API keys. Learn more about API keys.
Grant users access to all sandboxes in an account
When you assign the Sandbox Administrator role to a team member in your live account, they gain access to every sandbox linked to that account.
To add more team members to all sandboxes connected to your live account:
- Navigate to your live account in the Dashboard.
- Click the account picker > Settings in the Dashboard.
- Click Team and security > + Add member, then enter one or more email addresses. Select the Sandbox Administrator role.
- Click Send invites.
Grant users access to all sandboxes in an organisation
When you assign the Sandbox Administrator role to a team member in your live organisation, they gain access to every organisation sandbox linked to that organisation, as well as every sandbox linked to the live accounts within your organisation.
To add more team members to all sandboxes and organisation sandboxes connected to your live organisation:
- Navigate to your live organisation in the Dashboard.
- Click the account picker > Settings in the Dashboard.
- Click Team and security > + Add member, then enter one or more email addresses. Select the Sandbox Administrator role.
- Click Send invites.
Grant users access for testing only
When you grant a team member the Sandbox User role, you’re granting them access to create sandboxes and delete sandboxes they’ve created.
To invite additional team members to only the sandboxes associated with your live account or organisation, without granting access to any details of your live account or organisation:
- Navigate to your live account or organisation in the Dashboard.
- Click the account picker > Settings in the Dashboard.
- Click Team and security > + Add member, then enter one or more email addresses. Select the Sandbox User role.
- Click Send invites.
Grant users access to a specific sandbox
To invite additional team members to a specific sandbox or organisation sandbox:
- Navigate to the sandbox or organisation sandboxes in the Dashboard.
- Click the account picker > Settings in the Dashboard.
- Click Team and security > + Add member, then enter one or more email addresses and select a role.
- Click Send invites.
Note
Stripe automatically assigns the invited user the Sandbox User role in the live account or organisation if they don’t already have a live role.
Revoke user access to sandboxes
To revoke a user’s access:
- Navigate to the live account, live organisation, sandbox, or organisation sandbox where that user has a role assignment in the Dashboard.
- Click the account picker > Settings in the Dashboard.
- Click Team and security, then click the overflow menu ().
- Click Remove member to revoke their access.