- Go to Stripe Checkout → Settings in your WP admin.
- Paste your Stripe Secret API key (Dashboard → Developers → API keys) and save.
- Click Import Products from Stripe. Every active product (name, description, image, and its default price) is pulled in and stored as a “Stripe Product” post.
- Drop
[haghprim_products]on any page/post to show a grid of all imported products with “Buy Now” buttons, or[haghprim_product id="123"]for a single one. - Buy Now sends the shopper to Stripe’s own hosted Checkout page. No card data ever touches your server.
Re-running the import updates existing products (matched by their Stripe product ID) instead of duplicating them, so you can safely import again any time your Stripe catalog changes.
External services
This plugin connects to the Stripe API (api.stripe.com) to import your product catalog and to create hosted Checkout Sessions. This connection is required for the plugin’s core functionality and is made directly from your WordPress server, using the Stripe Secret API key you provide in Settings.
- When you click “Import Products from Stripe” in the admin, the plugin sends your Stripe Secret API key to Stripe’s API and requests your list of active products and prices, so it can be pulled into WordPress. No customer or site data is sent to Stripe as part of this request.
- When a shopper clicks “Buy Now” on the frontend, the plugin sends the product’s Stripe Price ID to Stripe’s API to create a Checkout Session, then redirects the shopper to Stripe’s own hosted Checkout page to complete payment. No card data is handled or stored by this plugin or by your server.
- This service is provided by Stripe, Inc.: Terms of Service, Privacy Policy.
Notes
- Only the Secret key is required — no publishable key, no webhook setup needed for the basic flow, since Checkout is fully hosted by Stripe.
- Choose “Subscription” as the Checkout Mode in Settings if your Stripe Prices are recurring; otherwise leave it on “One-time payment”.
- Your Stripe secret key is stored in the WordPress options table. Restrict admin access accordingly, and use a restricted API key (read Products/Prices, write Checkout Sessions) if you want to limit blast radius.