Update
BTCPay API Key Permissions Updated
The October 19 update to BTCPay Server restricts broad store-scoped API key permissions, preventing them from reaching server-wide or account-wide functions. As of October 26, version 2.4.5 remains the latest listed release, predating the fix. The update includes regression tests with keys having unrestricted permissions scoped to a single store, and it ensures that existing unscoped administrator keys retain their behavior.