otty / dotfiles

All tools/Stripe CLI

Stripe CLI

stripe

A command-line tool for Stripe.

Detected by stripe | macOS, Linux, Windows |docs.stripe.com

Sync it stripe.toml

Sync rules

What travels, what stays, what never leaves

Stripe CLI in your home directory Every rule on this page, by file

*.device_nameprofiles.*.device_name

Each machine keeps its own copy of these.

*.test_mode_api_key*.live_mode_api_key*.secret_key*.api_keyprofiles.*.test_mode_api_keyprofiles.*.live_mode_api_key

Lifted into your secret store; the rest of the file syncs.

· credentials.json Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/stripe.tomlThe file this page is generated from

id = "stripe"

name = "Stripe CLI"

homepage = "https://docs.stripe.com/stripe-cli"

description = "A command-line tool for Stripe."

icon = "SimpleIcons:stripe"

detect = ["stripe"]

# pkg/config/config.go, getConfigFolder(): $XDG_CONFIG_HOME, else the user's

# home joined with ".config", then "stripe" joined onto that — the XDG

# location, [configHome], on macOS as well as Linux. InitConfig() joins

# "config.toml" onto the folder and writes it 0600.

paths = ["[configHome]/stripe/config.toml"]

exclude = []

# pkg/config/config.go, CredentialsFilePath(): credentials.json in the same

# folder is "the plain-text credentials file used by the file fallback store

# when the OS keyring is unavailable" — the whole file is the credential.

secret = ["[configHome]/stripe/credentials.json"]

# The field names come from pkg/config/profile.go. TestModeAPIKeyName and

# LiveModeAPIKeyName are the restricted/secret keys `stripe login` stores, and

# authFieldNames also lists "secret_key" and "api_key" under "legacy field

# names from older config formats", so both are named here.

# Both layouts are covered too: in a v1 file every profile is a top-level

# table, and in ConfigVersionV2 "every profile moved under the reserved

# ProfilesTableName table", so a rule that knew only one shape would resolve

# to nothing on the other and sync a live key in the clear.

# The publishable keys (test_mode_pub_key / live_mode_pub_key) are

# deliberately absent: they are public by definition.

[[secret_paths]]

file = "[configHome]/stripe/config.toml"

match = { key_path = [

"*.test_mode_api_key",

"*.live_mode_api_key",

"*.secret_key",

"*.api_key",

"profiles.*.test_mode_api_key",

"profiles.*.live_mode_api_key",

] }

# device_name is the name this machine registers with Stripe, and is what the

# Dashboard shows for it — `stripe listen` on a second machine carrying the

# synced file would report itself as the first one. Both layouts again.

# The name is this device's own, and the user reads it in the Dashboard, so it

# is kept for restoring this machine and never applied to another.

[[machine_lines]]

file = "[configHome]/stripe/config.toml"

match = { key_path = ["*.device_name", "profiles.*.device_name"] }

scope = "backup"

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/stripe. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out. None of them splits *.device_name and profiles.*.device_name for you — that part is Otty’s own sync, or a template you write by hand.