What it is
PayPal hosts its server at https://mcp.paypal.com, with a sandbox at https://mcp.sandbox.paypal.com. PayPal's entry in the official MCP registry lists the /mcp (Streamable HTTP) and /sse paths; the developer docs, last updated 30 June 2026, still show /http and /sse, used through mcp-remote with a PayPal login or a bearer token built from your app's client ID and secret.
A local version runs with npx -y @paypal/mcp --tools=all (Node 18+), a PAYPAL_ACCESS_TOKEN and PAYPAL_ENVIRONMENT set to SANDBOX or PRODUCTION. Its last npm release was 1.8.1 on 28 October 2025, and the GitHub repository has had no commits since.
The 30 tools cover invoices (create, send, remind, cancel, QR codes), orders, payment and refunds, disputes, shipment tracking, catalogue products, subscription plans and subscriptions, and listing transactions.
Install
https://mcp.paypal.com/mcpOur review
On paper the server handles what PayPal merchants want to delegate: draft and send invoices, chase unpaid ones, look up orders, issue refunds and review disputes. The sandbox endpoint is welcome and lets you test prompts before touching real money.
In practice the project looks neglected. The open-source package has not changed since version 1.8.1 in October 2025, the repository has 13 stars, and an open issue from July 2026 reports that the hosted server's OAuth authorisation endpoint returns HTTP 500 for every request, in production and sandbox. Another open issue says create_invoice rejects arguments built from its own published schema. The registry and the docs disagree on the endpoint path.
The local route still works with a token, with friction. Production access tokens last eight hours, so someone has to regenerate PAYPAL_ACCESS_TOKEN from the client ID and secret, and the token carries whatever permissions the REST app has. There is no read-only mode or tool filter beyond the --tools flag.
Safety controls are thin for a server that moves money. There is no human-approval step: create_refund, pay_order and accept_dispute_claim act immediately, and accepting a dispute concedes it. Turn on per-tool approval in your client. For a server that can concede a dispute, and its $15 fee, in a single call, that gap matters more than the tool count.
Where it earns its place
A two-person landscaping business invoicing through PayPal
Create and send invoices from a chat instead of the PayPal dashboard
Ask the agent to draft an invoice for a named client and amount, review it, then send. The server is free; each paid invoice costs the standard 3.49% plus a fixed fee for PayPal checkout payments, or 2.99% plus a fixed fee for cards.
A developer at a small e-commerce shop
Prototype an agent that reconciles orders and refunds in sandbox
Run npx @paypal/mcp against SANDBOX with a short-lived token and test list_transactions, get_order and create_refund. Plan for a token refresh every few hours and per-call approval before moving to production.
An operations manager at a subscription box company
Review open disputes each morning
list_disputes and get_dispute give a summary to triage; keep accept_dispute_claim behind manual approval, since accepting concedes the case. US dispute fees are $15 each under standard pricing.
Before you commit
- Setup
- Hosted: point mcp-remote at the sandbox or production endpoint and sign in to PayPal in the browser, or pass a bearer token. Local: npx -y @paypal/mcp --tools=all with an access token from the Developer Dashboard. Documented for Claude Desktop, Cursor, Cline and GitHub Copilot.
- Integrations
- 30 tools: seven for invoices, five for orders, payment and refunds, three for disputes, two for shipment tracking, four for catalogue products, eight for subscriptions and plans, and list_transactions. Most write tools act immediately.
- Data and privacy
- The server can do whatever the PayPal REST app or signed-in account can, including refunds and payments. The hosted server sees all requests; PayPal publishes no MCP-specific retention terms and the repository has no security policy, which an open issue asks for.
- Cost at scale
- No fee for the server. Standard PayPal fees apply to what it creates: US invoicing 3.49% plus a fixed fee for PayPal checkout, 2.99% for cards, and $15 per dispute. PayPal does not publish API rate limits and throttles traffic it judges abusive with HTTP 429.
- Limits
- No reporting beyond list_transactions, no payouts or balance tools, hosted OAuth reported failing, and production tokens that expire after eight hours.
What's good
- Sandbox endpoint for safe testing
- 30 tools across invoices, refunds, disputes and subscriptions
- Hosted and local options
What's not
- No npm release or commit since October 2025
- Hosted OAuth reported broken since July 2026
- No approval step for refunds, payments or dispute acceptance
- Local tokens expire after eight hours
Best for
PayPal merchants who want an assistant to manage invoices and look up transactions.
Alternatives
PayPal MCP Server: common questions
- Is PayPal MCP Server worth it?
- PayPal's own server covers the right merchant jobs, but the local package has been frozen for a year and an open issue from July reports the hosted sign-in failing. We rate it 3.4 out of 5.
- How much does PayPal MCP Server cost?
- Free to connect; normal PayPal fees apply.
- What are the downsides of PayPal MCP Server?
- No npm release or commit since October 2025; hosted OAuth reported broken since July 2026; no approval step for refunds, payments or dispute acceptance; local tokens expire after eight hours.
- Who is PayPal MCP Server best for?
- PayPal merchants who want an assistant to manage invoices and look up transactions.
- How much does PayPal MCP Server cost for a team or in production?
- No fee for the server. Standard PayPal fees apply to what it creates: US invoicing 3.49% plus a fixed fee for PayPal checkout, 2.99% for cards, and $15 per dispute. PayPal does not publish API rate limits and throttles traffic it judges abusive with HTTP 429.
- Is PayPal MCP Server safe for company data?
- The server can do whatever the PayPal REST app or signed-in account can, including refunds and payments. The hosted server sees all requests; PayPal publishes no MCP-specific retention terms and the repository has no security policy, which an open issue asks for.
- What are the best PayPal MCP Server alternatives?
- The closest alternatives we have reviewed are Stripe MCP and Square MCP Server.
Answers checked Oct 23, 2026.