diff --git a/api/routes/route.js b/api/routes/route.js
index d6f8f15..ed7737d 100644
--- a/api/routes/route.js
+++ b/api/routes/route.js
@@ -5,9 +5,9 @@ const cardsControllers = require('../controller/cardsController.js');
 
 module.exports = function(app) {
     app.route('/create')
-        .get(cardsControllers.createCard);
+        .post(cardsControllers.createCard);
     app.route('/activate')
-        .get(cardsControllers.activateCard);
+        .post(cardsControllers.activateCard);
     // app.route('/eventSendMoney')
     //     .post(controller.activateCard);
 
diff --git a/service/cards.js b/service/cards.js
index c030e04..0765908 100644
--- a/service/cards.js
+++ b/service/cards.js
@@ -5,7 +5,7 @@ const db = require('../app/db')
 const logger = require('../app/logger');
 //const User = require("../app/model/cardModel.js");
 
-const stripe = require('stripe')('sk_test_51JwvOXCMmfol61TLadZlDf2rxq6Q1IC50JITRixcbyig8T2zdqpO8HY2NEcwNHacRQKQpTf6JGh7haqUVEH0rccA00eFht1ewi');
+const stripe = require('stripe')(process.env.STRIPE_SECRET_KEY);
 
 var cards = {
     createCard: async function (req, res, next) {