Developed and delivered the API Key Minimal Permissions Resolution feature for the stripe/stripe-cli repository, introducing a hidden subcommand that determines the minimal set of restricted API key permissions required for specified endpoints. This command-line tool, implemented in Go, prints resolved permissions and highlights unresolved endpoints as warnings, supporting a least-privilege security model and reducing the risk of misconfiguration. The work involved real-world mapping of endpoints to permissions, such as GET /v1/customers and GET /v1/charges/:id, and included collaboration with cross-team reviewers to ensure robust design, maintainability, and improved developer onboarding for new API endpoints through streamlined permission management.