---
title: "Stripe"
slug: "stripe"
tags: ["Self Service Ingestion"]
updated: 2026-07-20T17:05:42Z
published: 2026-07-20T17:05:42Z
canonical: "docs.hunters.ai/stripe"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Stripe

Self Service Ingestion

          

Connect this data source on your own, using the Hunters platform.

****TL;DR****

| Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Stripe Activity Logs |  |  |  | ✅ | stripe_activity_logs | JSON Array | S3 |

---

## Overview

![](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/Stripe-Logo.png)**Stripe** is a leading financial infrastructure platform that enables businesses to accept online payments, manage subscriptions, process payouts, and build scalable financial services. It provides a comprehensive suite of APIs and developer tools for integrating payment processing, billing, identity verification, fraud prevention, and financial reporting into applications. Stripe is designed with a developer-first approach, offering secure, reliable, and highly scalable APIs that support businesses of all sizes. With the introduction of **API v2**, Stripe is modernizing its API architecture by adopting JSON-based requests, improved pagination, enhanced idempotency, and better auditing capabilities such as Activity Logs. These enhancements simplify Integration while improving reliability, observability, and operational security.

## Supported data types

### Stripe Activity Logs

**Table name:** `stripe_activity_logs`

**Stripe Activity Logs** provide a centralized audit trail of administrative, security, and operational activities performed within a Stripe account. Available through the Stripe API v2, they capture actions initiated by users, service accounts, and automated Stripe systems, including changes to account settings, user access, roles, permissions, API keys, and authentication events. Each log entry includes details such as the actor, action performed, affected resource, timestamp, request metadata, and operation outcome where available. The API supports filtering and pagination, making it easier to retrieve and analyze audit events for security monitoring, incident investigation, compliance, and operational auditing.

Learn more [here](https://docs.stripe.com/api/v2/iam/activity-logs?api-version=2026-05-27.preview).

## Send data to Hunters

Hunters supports the collection of logs from Stripe through an intermediary AWS S3 bucket.

**To connect Stripe Activity logs:**

1. Export your logs from Stripe to an AWS S3 bucket by following [this guide](https://developer.harness.io/docs/cloud-cost-management/ccm-auditing).
2. Once the export is completed and the logs are collected to S3, follow the steps in [this section](/v1/docs/connect-data-through-aws-s3).

## Expected format

Logs are expected in **JSON Array** format.

```json
[ { "data": [ { "id": "accact_sample_000001", "object": "v2.iam.activity_log", "actor": { "type": "user", "user": { "email": "user.one@example.com" } }, "context": "acct_sample_000001", "created": "2026-05-19T19:56:15.000Z", "details": { "api_key": { "id": "mk_sample_000001", "created": "2026-05-19T19:56:15.000Z", "expires_at": null, "ip_allowlist": [], "managed_by": null, "name": "Sample Integration Activity Logs (Read Only)", "new_key": null, "note": "", "type": "secret_key" }, "type": "api_key" }, "livemode": true, "type": "api_key_created" }, { "id": "accact_sample_000002", "object": "v2.iam.activity_log", "actor": { "type": "user", "user": { "email": "user.one@example.com" } }, "context": "acct_sample_000001", "created": "2026-05-19T19:57:21.000Z", "details": { "api_key": { "id": "mk_sample_000001", "created": "2026-05-19T19:56:15.000Z", "expires_at": null, "ip_allowlist": [], "managed_by": null, "name": "Sample Integration Activity Logs (Read Only)", "new_key": null, "note": "Sample Activity Log Access", "type": "secret_key" }, "type": "api_key" }, "livemode": true, "type": "api_key_updated" }, { "id": "accact_sample_000003", "object": "v2.iam.activity_log", "actor": { "type": "user", "user": { "email": "user.one@example.com" } }, "context": "acct_sample_000001", "created": "2026-05-19T20:01:07.000Z", "details": { "api_key": { "id": "mk_sample_000001", "created": "2026-05-19T19:56:15.000Z", "expires_at": null, "ip_allowlist": [], "managed_by": null, "name": "Sample Integration Activity Logs (Read Only)", "new_key": null, "note": "Sample Activity Log Access", "type": "secret_key" }, "type": "api_key" }, "livemode": true, "type": "api_key_updated" }, { "id": "accact_sample_000004", "object": "v2.iam.activity_log", "actor": { "type": "user", "user": { "email": "admin.user@example.com" } }, "context": "acct_sample_000001", "created": "2026-05-22T17:53:57.000Z", "details": { "type": "user_roles", "user_roles": { "new_roles": [], "old_roles": [ "urole_operator" ], "user_email": "target.user@example.com" } }, "livemode": true, "type": "user_roles_deleted" } ], "next_page_url": "/v2/iam/activity_logs?page=page_sample_000001", "previous_page_url": null } ]
```

A source of data from a specific vendor supported by Hunters, such as AWS, GCP, CrowdStrike, or Okta. Setting up an integration allows Hunters to connect to that vendor and retrieve all relevant security data.