Debugging the Stripe API using Runscope
blog.epanastasi.com
blog.epanastasi.com
Some of our customers are running it in production apps but for the most part you turn it on to solve a problem then turn it off when you're done. Down the road we'll be making production use more useful with the security concerns you mention at the forefront.