Two, and only two: Manage Roles, so it can add and remove the roles you sell, and Create Invite, which is what Discord requires to put a buyer into your server. flatpass never asks for Administrator.
Manage Roles. The whole product: it is how the bot puts a role on a member who has paid, and takes it off when they stop.
Create Invite. Discord requires it to add somebody to a server. Without it the bot can only give roles to people already inside, so a buyer who paid from a link you posted elsewhere — and anyone joining a free tier — can’t be let in.
Never Administrator. A bot that requires it holds every permission in the server, including plenty it has no business with. flatpass never asks for it.
It can't read your messages. Reading channel content needs a separate, privileged Discord permission that flatpass does not hold. The only messages Discord delivers to it are ones that @mention it directly — everything else arrives with no content at all.
Asking isn't keeping. An admin can edit the bot’s role, or @everyone’s, after the install, and Discord doesn’t tell us. So flatpass re-checks both permissions every time you open your dashboard and says which one is missing.
A permission doesn't beat the role list. Position is a separate rule from permissions: no permission, including Administrator, lets a bot assign a role that sits at or above its own. That is the commonest reason a role isn’t being granted, and it has its own page.
Discord creates the bot's own role at the bottom of the list, and a bot can only assign roles below it. Drag flatpass above the role you sell.
Add the bot, connect Stripe, pick a role, set a price — about ten minutes, most of it Stripe's own identity check.
Yes, one per server, and free members never count toward the paid-member cap. Whether a tier is free is fixed when you create it.