Stripe

Overview

The Stripe connector registers a webhook endpoint on your account and turns each delivery into a typed event. Tessel verifies the Stripe-Signature header before anything runs, and the raw payload is kept in the trace of the run it started.

Finance teams use it to open a ticket in Zendesk when an invoice payment fails, to match payouts against bank lines in NetSuite and to post new disputes to a Slack channel with the evidence deadline attached.

Event coverage

• Invoices, charges, refunds, payouts, disputes and subscriptions

• Test mode and live mode on the same connection, kept apart in traces

• Stripe Connect accounts, with the account ID on every event

How webhooks work

Tessel creates one endpoint per workspace region and subscribes only to the events your workflows use. Each event is checked against the API version pinned on the endpoint, so a field rename on Stripe's side never breaks a running workflow.

stripe webhook_endpoints create \
  --url https://hooks.eu.tessel.app/stripe/ws_8f2k \
  -d "enabled_events[]=invoice.paid" \
  -d "enabled_events[]=invoice.payment_failed" \
  -d "enabled_events[]=charge.dispute.created" \
  -d api_version=2024-06-20

stripe webhook_endpoints create \
  --url https://hooks.eu.tessel.app/stripe/ws_8f2k \
  -d "enabled_events[]=invoice.paid" \
  -d "enabled_events[]=invoice.payment_failed" \
  -d "enabled_events[]=charge.dispute.created" \
  -d api_version=2024-06-20

stripe webhook_endpoints create \
  --url https://hooks.eu.tessel.app/stripe/ws_8f2k \
  -d "enabled_events[]=invoice.paid" \
  -d "enabled_events[]=invoice.payment_failed" \
  -d "enabled_events[]=charge.dispute.created" \
  -d api_version=2024-06-20

Idempotency

Every write sends an Idempotency-Key derived from the run and step, so a retried refund never refunds twice. Stripe can deliver an event more than once, and Tessel drops duplicates by event ID.

Permissions needed

Use a restricted key rather than your secret key. It needs read access to the objects your triggers watch. Write access is only required for refunds, subscription updates and invoice items.

• Webhook Endpoints: Write so Tessel can register its endpoint

• Charges, Customers and Invoices set to Read

• Refunds: Write and Subscriptions: Write only if you use those actions