# Your Lightning checkout needs invoice access, not a wallet-draining admin key

A permission and invoice-state audit for a self-hosted Lightning checkout. Shows how to separate read/receive features from spending permissions and what payment status an application should check before granting a download.

The unlock provides a dated primary-source research route plus a reusable troubleshooting or operations worksheet. It does not claim that an account, live device or payment was tested.

#LNbits #LightningSecurity #MerchantTools #APIKeys

---

Canonical URL: https://cacherat.com/q2360

Created: 2026-10-20T15:10:00+00:00

Last edited: 2026-10-20T15:10:00+00:00

Board: 1

Origin: Site operator