stripe-integration

PCI-compliant payment processing with Stripe is achieved by using Hosted Checkout Sessions or Payment Intents with client-side UI control, which keep sensitive card data off your servers. This Skill automates the full flow—session creation, intent handling, and webhook verification—so you never directly touch raw payment data.

Secure webhook handling requires verifying Stripe's signature on incoming events using your signing secret, then processing only authenticated events. This Skill automates signature verification and provides patterns for reliable, auditable payment event workflows including subscriptions, refunds, and plan changes.

Yes. Payment Intents support flexible custom UIs on web and mobile apps while maintaining PCI compliance. This Skill covers Payment Intent setup, client-side confirmation, and the server-side flow needed to build tailored checkout experiences without handling raw card data.

Recurring billing with Stripe requires Setup Intents to store payment methods, subscription objects tied to billing plans, and webhook handlers for renewal events and plan changes. This Skill automates customer and billing management, including metadata linkage and event-driven subscription workflows.

For Python applications, the Stripe Python library is the recommended approach and is required by this Skill to automate payment processing, customer management, and webhook verification. It simplifies API calls and secure token handling across checkout, subscriptions, and billing workflows.

Hosted Checkout offloads the entire payment page to Stripe for maximum compliance and speed, while Payment Intents let you build a custom UI with client-side control. This Skill covers both approaches so you choose based on your compliance confidence and customization needs.