Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 9
- 4 7
- 3 3
- 2 0
- 1 0
Trust in production
- Trust it - 68%
- With caveats - 32%
- Wouldn't - 0%
89% would recommend this server
How reviewers scored it
- Setup & docs 3.9
- Auth experience 3.9
- Reliability 4.4
- Maintainer responsiveness 4.5
Why it got a B
Official, with a hosted server (PayPal sign-in, separate sandbox host) and a local one that takes a short-lived access token and defaults to sandbox. Write tools can send invoices, capture orders, issue refunds and accept disputes, so pass a narrow --tools list and pin package versions. Biggest deduction: neither path documents per-tool scopes, so access is as wide as the PayPal app or login behind it.
How to connect
// ~/.cursor/mcp.json (local server; PayPal shows it for Claude and says Cursor works the same)
{
"mcpServers": {
"paypal": {
"command": "npx",
"args": [
"-y",
"@paypal/mcp",
"--tools=all"
],
"env": {
"PAYPAL_ACCESS_TOKEN": "YOUR_PAYPAL_ACCESS_TOKEN",
"PAYPAL_ENVIRONMENT": "SANDBOX"
}
}
}
}// claude_desktop_config.json (remote sandbox, Streamable HTTP, PayPal sign-in)
{
"mcpServers": {
"paypal-mcp-server": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.sandbox.paypal.com/http"
]
}
}
}Is PayPal MCP Server safe?
Is PayPal MCP Server safe to use?
PayPal MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does PayPal MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does PayPal MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Payments & Billing
- A Stripe MCPOfficial hosted Stripe server for customers, payments, invoices, subscriptions, and refunds.
- B Square MCP ServerOfficial Square server exposing the full Square API (payments, orders, catalog, refunds).
- C Adyen MCP ServerOfficial local server (alpha) for Adyen Checkout sessions, payment links, refunds, cancels, terminals and webhooks.
Embed this badge
[](https://trustedmcp.io/servers/paypal-mcp-server)<a href="https://trustedmcp.io/servers/paypal-mcp-server"><img src="https://trustedmcp.io/badge/paypal-mcp-server.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Better than the DIY script it replaced
Started with it as an experiment, now it is a fixture. The scope options are worth reading carefully, the defaults are broader than I wanted. It is in our production agent and I sleep fine.
Used for Reconciling refunds
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
No complaints after a month
Our agents call this dozens of times a day. You can tell it is actively maintained, the rough edges keep getting fixed. Scoped the token to just what the agent needs and it respected that.
Used for Monthly revenue summaries
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Quietly reliable
Been running this for about a month now. Used a fine-grained token with short expiry and it works fine with that.
Used for Answering billing questions from customers
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Set this up for our team after comparing a few options. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Would recommend without hesitation.
Used for Investigating disputes
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Of the PayPal integrations I tried, this one is the most predictable. Sign-in flow was painless and I never had to paste a key into a config file. Happy to run it in production.
Used for Testing checkout flows in test mode
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Our team uses it every day
Replaced a homegrown script with PayPal MCP Server and have not looked back. Sign-in flow was painless and I never had to paste a key into a config file. Good choice if you need PayPal in your agent.
Used for Answering billing questions from customers
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Clear tool names, sensible outputs, very few surprises. Sign-in flow was painless and I never had to paste a key into a config file. It is in our production agent and I sleep fine.
Used for Testing checkout flows in test mode
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Trustworthy enough for real work
Replaced a homegrown script with PayPal MCP Server and have not looked back. Updates land regularly, and nothing broke when I upgraded. Nice to use something maintained by PayPal rather than a random fork. Easy recommendation.
Used for Reconciling refunds
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Simple to set up in Cursor, simple to reason about. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Reconciling refunds
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Set it up once, forgot about it
Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Easy recommendation.
Used for Investigating disputes
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Decent, not set-and-forget
Useful tool, though I would not hand it to a junior unsupervised. Used a fine-grained token with short expiry and it works fine with that. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Worth it, just do not skip the hardening steps.
Used for Monthly revenue summaries
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Exactly what I needed from PayPal
Tried it on a side project first, then rolled it out at work. Filed an issue and got a reply within two days. Keep permissions tight and it is a good tool.
Used for Monthly revenue summaries
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
Works well enough for what I need. You can tell it is actively maintained, the rough edges keep getting fixed. Sign-in flow was painless and I never had to paste a key into a config file. Narrowing the scopes took ten minutes and made me much happier running it.
Used for Testing checkout flows in test mode
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Works, just lock it down
Some tools are great, a couple feel half finished. Scoped the token to just what the agent needs and it respected that. Used a fine-grained token with short expiry and it works fine with that. I would use it in prod, but only with a human approving writes.
Used for Investigating disputes
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Easy win for our agent setup
Hooked PayPal MCP Server into Claude Code and it worked on the first try. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Nice to use something maintained by PayPal rather than a random fork. Would recommend without hesitation.
Used for Looking up failed payments for support
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Simple to set up in Cursor, simple to reason about. Narrowing the scopes took ten minutes and made me much happier running it. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Good choice if you need PayPal in your agent.
Used for Looking up failed payments for support
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
The PayPal integration I wanted
Set this up for our team after comparing a few options. Sign-in flow was painless and I never had to paste a key into a config file. It is in our production agent and I sleep fine.
Used for Looking up failed payments for support
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Been running this for about a month now. Updates land regularly, and nothing broke when I upgraded. Auth is handled properly, and revoking access later was one click.
Used for Answering billing questions from customers
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
I use this almost daily. Auth is handled properly, and revoking access later was one click. Filed an issue and got a reply within two days. Happy to run it in production.
Used for Looking up failed payments for support
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.