Verified

PayPal MCP Server

PayPal API interactions to create, manage, and send invoices and orders via AI agents.

Data last scanned today · Reviewed today

45 dangerous tools30 tools12JavaScriptApache-2.0

Overview

This JavaScript-based MCP server provides an interface to interact with PayPal services directly through function calling. It enables AI assistants to perform operations such as listing existing invoices, generating invoice QR codes, creating orders, and managing invoice lifecycle tasks like sending reminders or canceling documents.

Our verdict

This server carries a high risk level with a security score of 29/100, primarily because it is a community-maintained project rather than an official tool from PayPal. Key security concerns include the lack of an editorially reviewed authentication method and unverified read-only status. Given these risks, this server should only be used by developers for testing purposes in sandbox environments and is not recommended for production workflows involving sensitive financial data.

  • Supports multiple invoice and payment-related API operations
  • Small footprint with only three direct dependencies
  • Open-source implementation under the Apache-2.0 license
  • Not an official product maintained by PayPal
  • Security-critical authentication methods remain unreviewed
  • Project has seen limited activity with last commit 318 days ago

Setup

Claude Desktop
{
  "mcpServers": {
    "paypal-mcp-server": {
      "args": [
        "-y",
        "@paypal/mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
create_invoiceCreate a new invoice in the PayPal systemmedium
list_invoicesList invoices with optional pagination and filteringlow
get_invoiceRetrieve details of a specific invoicelow
send_invoiceSend an invoice to recipientsmedium
send_invoice_reminderSend a reminder for an existing invoicemedium
cancel_sent_invoiceCancel a sent invoicehigh
generate_invoice_qr_codeGenerate a QR code for an invoicelow
create_orderCreate an order in PayPal system based on provided detailsmedium
get_orderRetrieve the details of an orderlow
pay_orderProcess payment for an authorized orderhigh

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What are the system requirements for running the PayPal MCP server?

You need to have Node.js version 18 or higher installed on your local machine.

How can I configure the server for different environments?

You can set the PAYPAL_ENVIRONMENT environment variable to SANDBOX for stage testing or PRODUCTION for live transactions.

What is the default environment if I do not specify one?

The server defaults to SANDBOX mode if no PAYPAL_ENVIRONMENT variable is provided.

Can I pass my access token via command-line arguments instead of environment variables?

Yes, you can pass the token as an argument using the --access-token flag in your configuration.

What kind of PayPal account is required for production usage?

You must have a PayPal Business account to access production features.

Where can I find the credentials needed to generate an access token?

You can retrieve your Client ID and Client Secret by logging into the PayPal Developer Dashboard and accessing the Apps & Credentials section.

Alternatives

Badge

PayPal MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.