What is the Platform API?
The Platform API is for users who want to manage Autumn on behalf of their users (for example, AI app builders) in a multi-tenant flow.How it Works
1. Create an Organization
Create an Autumn organization linked to a user email. This generates API keys that your user can use to interact with Autumn’s billing features.2. Integrate
Each organization created through Step 1 already has a Stripe account connected to their sandbox environment. As such, you can freely integrate and test Autumn without additional Stripe credentials. When you’re ready to go to prod, you can then connect your user’s Stripe account through the Step 3.3. Link Stripe Account
Connect your user’s Stripe account using one of two methods: Option A: OAuth Flow Call our Generate Stripe OAuth URL endpoint, which generates a link that lets the user connect their Stripe account directly. Option B: Direct Account ID If you have your own Stripe Connect platform, simply pass us the Stripe account ID using the Update Connected Stripe Account endpoint and we’ll handle the rest.4. Manage the OAuth Connection
Use Get Stripe Connection to decide whether to show Connect Stripe or Disconnect Stripe. Call it after the OAuth redirect and when reopening your connection settings. Pass the tenant’s publicorganization_slug and env: "test" or env: "live"; authenticate with your master organization’s key, not the tenant’s key. The env field selects the connection independently of whether that key is a test or live key.
The response identifies the OAuth account and its connection time. Historical connections may have connected_at: null. Default sandbox accounts, separate secret-key connections, and direct account-ID connections through your own Stripe platform do not count as Autumn OAuth connections.
Use Disconnect Stripe to revoke the tenant’s OAuth authorization and clear that environment’s connection. Disconnecting does not delete the Stripe account or cancel its subscriptions. The other environment and the default sandbox account are preserved. To reconnect, generate a fresh OAuth URL and ask the tenant to authorize again.