PayPal
paypal.comPayPal Business is a payment service for taking online payments, sending invoices and paying out money.
Can an AI agent use PayPal? No. Our agent couldn't get into PayPal on its own.
From finding it to leaving
What an agent managed without a person, at each step.
- On its own
Find
Docs it can act on: llms.txt, an OpenAPI and an MCP server. 303 doc pages read.
- Stopped
Get in
Stopped hereCan't sign up. A bot block page appears on sign-up and sign-in.
- Not reached
Use
Tasks need an account.
- Not reached
Pay
Buying needs an account.
- Not reached
Leave
Nothing to cancel or delete.
Getting in
None of the 3 ways in got our agent in on its own; one got partway.
Where it stopped
Email and password
A bot block page appears on sign-up and sign-in.
- Both kinds of agentOn a server, or in its own browserNoSigning up needs a person: it returned a block page served by DataDome.
- Signed agentKnown to CloudflareYesThe sign-up page opens.
Every way in
| Way in | What happened |
|---|---|
| No key needed | Partway |
| Email and password | Stopped by a CAPTCHA |
| Sign-in for apps (OAuth, MCP) | Stopped by a bot check |
- Crawlersrobots.txt asks crawlers to stay off sign-up and the API. Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.
What an agent can do with PayPal
No task was tried: our agent couldn't get into PayPal.
Core tasks PayPal offers an agent
- offered, not tried
- Accept an online payment via PayPal CheckoutAPI
- Embed a branded checkout in your siteAPI
- Create a payment link (no-code)Web app
- Create and send an invoiceAPI
- Take an in-person payment (POS, Tap to Pay, card reader)Web app
- Pay out the balance or send payouts to recipientsAPI
- Onboard a connected (marketplace) accountAPI
- Get API credentials or an MCP tokenKeys only come from the dashboard, which is behind the block.
- Send invoices, make payouts, payment links, refunds or webhooksEvery call needs credentials from an account.
- Approve and finish a test paymentThe test buyer sign-up needs a phone number.
28 more tasks it offers
- Authorise and capture a payment separatelyAPI
- Refund a paymentAPI
- Save a customer's payment method (vault)API
- Record a payment on an invoiceAPI
- Edit or delete an invoiceAPI
- Set up recurring invoicesWeb app
- Request a deposit or installment payment on an invoiceWeb app
- Enable local/alternative payment methods for buyersAPI
- Offer a Buy Now Pay Later (Pay Later) option at checkoutAPI
- Charge in multiple currenciesAPI
- List payments / view transaction historyAPI
- Run a payment or sales reportAPI
- Read the account balanceAPI
- Respond to a dispute or chargebackAPI
- Screen payments for fraud / set risk rulesWeb app
- Register a webhook for payment eventsAPI
- Send a test webhook eventAPI
- Use a sandbox / test modeAPI
- Buy a discounted shipping labelWeb app
- Calculate sales tax at checkoutAPI
- Apply for business financing (working capital or business loan)Web app
- Issue a PayPal Business Debit CardWeb app
- List and connect sales channels (platforms and marketplaces)Web app
- Sync a product catalog for AI shopping discovery (Store Sync)Web app
- Manually key in a card payment (Virtual Terminal)Web app
- Collect donations at reduced nonprofit ratesWeb app
- Comply with PCI network/security requirementsWeb app
- Get custom high-volume pricing (Contact Sales)Web app
Surface audit: 158 documented operations, 9 run, 3 passed, 6 not as documented, 148 blocked (sandbox or plan limits), 1 left out to stay safe.
How an agent connects
MCP, API, OpenAPI, SDK and llms.txt found.
MCP server
5 testedOfficial server. Remote OAuth (DCR) and local npx @paypal/mcp, 28 tools when driven. Sign‑in needed to see its tools.
In the MCP registry as
com.paypal.mcp/mcp.34 tools across its docs
API
Listed, not testedREST, 115 operations in 13 OpenAPI specs.
115 operations across its docs
OpenAPI
Yes3.0.3/3.0.4 on GitHub.
CLI
None foundSDK
3 testedJS SDK v5 (client-id=sb shortcut), @paypal/paypal-server-sdk 2.5.0, @paypal/agent-toolkit 1.11.0.
5 methods across its docs
llms.txt
YesAgent payments
None foundThe checkout wasn't reached.
Docs
In partCovers getting started, auth and error codes.
Code examples on only some pages.
303 of 5,150 pages read
Tips for agent builders
- For a no-account checkout prototype, load https://www.paypal.com/sdk/js?client-id=sb and create orders with actions.order.create (sandbox).
- Read any developer.paypal.com page as Markdown by appending .md to its URL.
- OpenAPI specs: github.com/paypal/paypal-rest-api-specifications/openapi.
- Remote MCP: https://mcp.paypal.com/mcp (sandbox https://mcp.sandbox.paypal.com/mcp) with OAuth via DCR; the local server is npx @paypal/mcp with PAYPAL_ACCESS_TOKEN.
How PayPal compares
In Payments
2 of the 7 products we drove in Payments are higher; 4 others share L1.
| Product | Level | Find to leave |
|---|---|---|
| L4 | Find: On its own, Get in: On its own, Use: On its own, Pay: Partly, Leave: On its own. | |
| L3 | Find: On its own, Get in: On its own, Use: Partly, Pay: Not reached, Leave: On its own. | |
| L1 | Find: Partly, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. |
Sorted by level, then work done, then time to the first call. How we rank
For the team behind PayPal
Agents get stuck at Get in. Prove PayPal is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.
6 things to fix for agents
Agent blockers: 3 foundAgent surfaces: 6 issues foundSafety review: 1 issue found
- FindClear
- Get inBlocks agents
- UseNot reached
- PayNot reached
- LeaveNot reached
On our standard
24 criteria: against other payments products where we measured 5 or more, otherwise against every product we measured.
- Payments safe to retry, with a receiptThe best result All 4 others (payments products) lower.
- Answers sized for an agentAhead of most 3 of 4 others (payments products) lower, 1 the same.
- Spend an agent can see and capIn the middle 2 of 4 others (payments products) lower, 2 the same.
- Every way in works for an agentAhead of most 3 of 5 others (payments products) lower, 1 the same, 1 higher.
- Export before leavingBehind most 3 of 5 others (payments products) higher, 2 the same.
- Truthful annotationsBehind most 48 of 65 others (every product) higher, 17 the same.
- Docs an agent can navigateBehind most 4 of 5 others (payments products) higher, 1 the same.
- Versions an agent can pinThe lowest result All 4 others (payments products) higher.
All 24 criteria
- Descriptions that say when to use the toolIn the middle 20 of 65 others (every product) lower, 30 the same, 15 higher.
- Tool names that sort themselvesLevel with most 61 of 65 others (every product) the same, 4 lower.
- Pages fit one fetchThe same as all 5 others (payments products).
- A path written for agentsThe same as all 5 others (payments products).
- Fast to the first callThe same as all 4 others (payments products).
- One way to page through listsThe same as all 4 others (payments products).
- Real status codesThe same as all 5 others (payments products).
- Errors a program can readIn the middle 1 of 4 others (payments products) lower, 2 the same, 1 higher.
- Errors say what to do nextIn the middle 1 of 4 others (payments products) lower, 2 the same, 1 higher.
- WebMCP tools on the web appThe same as all 5 others (payments products).
- Typed, tight input schemasLevel with most 39 of 65 others (every product) the same, 10 lower, 16 higher.
- A tool list that fitsBehind most 33 of 65 others (every product) higher, 16 the same, 16 lower.
- Agents pick the right toolLevel with most 44 of 65 others (every product) the same, 1 lower, 20 higher.
- The best way in is built for agentsLevel with most 3 of 5 others (payments products) the same, 2 higher.
- Sign-in for agents acting for a personBehind most 3 of 5 others (payments products) higher, 2 the same.
- A request id on every answerBehind most 3 of 5 others (payments products) higher, 2 the same.
Where PayPal fits
- Category
- Wall
- Bot checkskept our agent out
- DataDome bot checkthe check, and every product we met it at
- Let signed AI agents past your bot checkfix guide
- Rivals
- Lemon SqueezyL1
- MollieL1
- PolarL1
Found an error? Tell us on this page or read how corrections work.
Questions people ask about PayPal
- Can an AI agent sign up for PayPal on its own?
- No. Sign-up: needs a human. A bot check from DataDome stopped our agent there. The Braintree sandbox sign-up has a visible reCAPTCHA.
- Does PayPal have an MCP server, and can an agent connect to it?
- Yes. PayPal has an official MCP server. The server lists 28 tools and signs an agent in with OAuth. A new agent can't get in on its own: in the drive of 31 Oct 2026, our agent stopped at sign up (it needs a person).
Cite this page
The page as a reference, in plain text, APA and BibTeX.
Cite this
AgentDrives, “PayPal: AI agent test drive”, 31 October 2026, https://agentdrives.com/tools/paypal. CC BY 4.0.
AgentDrives. (2026, October 31). PayPal: AI agent test drive. https://agentdrives.com/tools/paypal
@misc{agentdrives_paypal_2026,
author = {{AgentDrives}},
title = {PayPal: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/paypal},
note = {Agent test drive, CC BY 4.0},
}Something wrong on this page?
Tell us what's wrong. We check it against the drive and correct the page, with the date.