The most secure way for Aqueduct to do payment processing on your stripe account is by providing us with a restricted API key.
You can create a restricted API key through your Stripe dashboard. It should look like this:

For Aqueduct to process various type of payments - e.g. credit cards, wire transfers, ACH - we need write permissions to the following (ignore connect permissions):
ChargesCustomersPaymentIntentsPaymentMethodsSetupIntentsSourcesCheckout SessionsInvoicesWebhook EndpointsDebugging toolsPayment LinksAs well as read permissions to the following (ignore connect permissions):