With our mobile library,we shoulder the burden of PCI compliance by eliminating the need to send card data directly to your server. Instead,our libraries send the card data directly to our servers,where we can convert them to tokens.

这意味着通常会收到一个信用卡号码,并且预计会将其存储起来供以后使用(例如,客户将其输入您的帐户页面以便每月收费),但这使您有法律义务遵守PCI标准,这可能是一个令人头痛的问题Stripe可以减轻您的负担 – 他们会存储信用卡,如果您想稍后再收费,您可以给他们生成代表该信用卡的令牌.

Your app will receive the token back,and can then send the token to an endpoint on your server,where it can be used to process a payment,establish recurring billing,or merely saved for later use.

这在另一部分https://stripe.com/docs/mobile/android#using-tokens中进行了解释

Using the payment token,however it was obtained,requires an API call from your server using your secret API key. (For security purposes,you should never embed your secret API key in your app.)

(这是drhr提到的.)

由于您需要密钥才能进行API调用,因此需要从您自己的服务器完成,因此您需要一台服务器.

注意：我没有使用Stripe,我记得,我只是想分享我对文档的阅读.

附：我认为你的第二个问题是独立的,但托管Java webapp的一些流行和简单的选择是Heroku和AppEngine.对于类似的东西,你可以使用无服务器方法,例如使用AWS Lambda https://aws.amazon.com/lambda(google在Alpha阶段https://cloud.google.com/functions/中具有等效功能)