# PayPal L1 · Needs a person

PayPal Business is a payment service for taking online payments, sending invoices and paying out money.

**Can an AI agent use PayPal? No.** Our agent couldn't get into PayPal on its own.

Category: Payments · Connects by: MCP, API, SDK · Agent payments: None found · Driven: 31 Oct 2026

**How to connect**
- MCP server URL: `https://mcp.paypal.com/mcp` (streamable HTTP, documented). Source: https://mcp.paypal.com/mcp
- API base URL: `https://api-m.sandbox.paypal.com` (documented). Source: https://api.github.com/repos/paypal/paypal-rest-api-specifications/contents/openapi
- Docs page: `https://developer.paypal.com/` (tested in our drive). Source: https://developer.paypal.com/

**Level 1: Needs a person.** Agents can't get in on their own.
- Got in by: A person sets it up (Not on its own in its last 3 drives)
- Got as far as: Sign up (Use, Pay and Leave not reached)
- To reach L2: Let an agent sign up on its own.

[What the levels mean](https://agentdrives.com/method/levels?via=md)

## From finding it to leaving

What an agent managed without a person, at each step.

1. **Find**: On its own. Docs it can act on: llms.txt, an OpenAPI and an MCP server. 303 doc pages read.
2. **Get in**: Stopped. Can't sign up. A bot block page appears on sign-up and sign-in. Stopped here.
3. **Use**: Not reached. Tasks need an account.
4. **Pay**: Not reached. Buying needs an account.
5. **Leave**: Not reached. Nothing to cancel or delete.

## Getting in

None of the 3 ways in got our agent in on its own; one got partway.

Where it stopped: **Email and password**. A bot block page appears on sign-up and sign-in.

- Both kinds of agent (On a server, or in its own browser): No. Signing up needs a person: it returned a block page served by DataDome.
- Signed agent (Known to Cloudflare): Yes. The sign-up page opens.

| Way in | What happened |
|---|---|
| No key needed | Partway |
| Email and password | Stopped by a CAPTCHA |
| Sign-in for apps (OAuth, MCP) | Stopped by a bot check |

- Crawlers: **robots.txt asks crawlers to stay off sign-up and the API.** Nothing to fix. It keeps these pages out of search and doesn't stop agents signing up.

[How agents get past bot checks](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check.md?via=md)

## What an agent can do with PayPal

No task was tried: our agent couldn't get into PayPal.

Core tasks PayPal offers an agent:

- Accept an online payment via PayPal Checkout (API)
- Embed a branded checkout in your site (API)
- Create a payment link (no-code) (Web app)
- Create and send an invoice (API)
- Take an in-person payment (POS, Tap to Pay, card reader) (Web app)
- Pay out the balance or send payouts to recipients (API)
- Onboard a connected (marketplace) account (API)

What it can't do, and why:

- Get API credentials or an MCP token: Keys only come from the dashboard, which is behind the block.
- Send invoices, make payouts, payment links, refunds or webhooks: Every call needs credentials from an account.
- Approve and finish a test payment: The test buyer sign-up needs a phone number.

28 more tasks it offers:

- Authorise and capture a payment separately (API)
- Refund a payment (API)
- Save a customer's payment method (vault) (API)
- Record a payment on an invoice (API)
- Edit or delete an invoice (API)
- Set up recurring invoices (Web app)
- Request a deposit or installment payment on an invoice (Web app)
- Enable local/alternative payment methods for buyers (API)
- Offer a Buy Now Pay Later (Pay Later) option at checkout (API)
- Charge in multiple currencies (API)
- List payments / view transaction history (API)
- Run a payment or sales report (API)
- Read the account balance (API)
- Respond to a dispute or chargeback (API)
- Screen payments for fraud / set risk rules (Web app)
- Register a webhook for payment events (API)
- Send a test webhook event (API)
- Use a sandbox / test mode (API)
- Buy a discounted shipping label (Web app)
- Calculate sales tax at checkout (API)
- Apply for business financing (working capital or business loan) (Web app)
- Issue a PayPal Business Debit Card (Web app)
- List and connect sales channels (platforms and marketplaces) (Web app)
- Sync a product catalog for AI shopping discovery (Store Sync) (Web app)
- Manually key in a card payment (Virtual Terminal) (Web app)
- Collect donations at reduced nonprofit rates (Web app)
- Comply with PCI network/security requirements (Web app)
- Get custom high-volume pricing (Contact Sales) (Web app)

**Surface audit:** 158 documented operations, 9 run, 3 passed, 6 not as documented, 148 blocked (sandbox or plan limits), 1 left out to stay safe.

## How an agent connects

MCP, API, OpenAPI, SDK and llms.txt found.

Agent surfaces: API documented · MCP tested · CLI none found · SDK tested · Docs tested · Agent payments none found. Issues found: 9.

- **MCP server**: 5 tested. Official server. Remote OAuth (DCR) and local npx @paypal/mcp, 28 tools when driven. Sign-in needed to see its tools. https://mcp.paypal.com/mcp In the MCP registry as `com.paypal.mcp/mcp`. (34 tools across its docs)
- **API**: Listed, not tested. REST, 115 operations in 13 OpenAPI specs. (115 operations across its docs)
- **OpenAPI**: Yes. 3.0.3/3.0.4 on GitHub.
- **CLI**: None found.
- **SDK**: 3 tested. JS SDK v5 (client-id=sb shortcut), @paypal/paypal-server-sdk 2.5.0, @paypal/agent-toolkit 1.11.0. (5 methods across its docs)
- **llms.txt**: Yes. https://www.paypal.com/llms.txt
- **Agent payments**: None found. The checkout wasn't reached.
- **Docs**: In part. Covers getting started, auth and error codes. Code examples on only some pages. https://developer.paypal.com/ (303 of 5,150 pages read)

[The standards](https://agentdrives.com/standard)

## Tips for agent builders

- For a no-account checkout prototype, load https://www.paypal.com/sdk/js?client-id=sb and create orders with actions.order.create (sandbox).
- Read any developer.paypal.com page as Markdown by appending .md to its URL.
- OpenAPI specs: github.com/paypal/paypal-rest-api-specifications/openapi.
- Remote MCP: https://mcp.paypal.com/mcp (sandbox https://mcp.sandbox.paypal.com/mcp) with OAuth via DCR; the local server is npx @paypal/mcp with PAYPAL_ACCESS_TOKEN.

## How PayPal compares

In Payments: 2 of the 7 products we drove in Payments are higher; 4 others share L1.

- [GoCardless](https://agentdrives.com/tools/gocardless.md?via=md): L4, Gets in on its own
- [Stripe](https://agentdrives.com/tools/stripe.md?via=md): L3, Gets in on its own
- [Lemon Squeezy](https://agentdrives.com/tools/lemonsqueezy.md?via=md): L1, Can't sign up on its own
- [Mollie](https://agentdrives.com/tools/mollie.md?via=md): L1, Can't sign up on its own
- **PayPal** (this page): L1, Can't sign up on its own
- [Polar](https://agentdrives.com/tools/polar.md?via=md): L1, Can't sign up on its own
- [Square](https://agentdrives.com/tools/squareup.md?via=md): L1, Can't sign up on its own

[All 7 in Payments](https://agentdrives.com/categories/payments?via=md)

Sorted by level, then work done, then time to the first call. [How we rank](https://agentdrives.com/method?via=md#order)

On our standard (24 criteria: against other payments products where we measured 5 or more, otherwise against every product we measured):

- [Payments safe to retry, with a receipt](https://agentdrives.com/standard#pay-04): **The best result** All 4 others (payments products) lower.
- [Answers sized for an agent](https://agentdrives.com/standard#api-04): **Ahead of most** 3 of 4 others (payments products) lower, 1 the same.
- [Spend an agent can see and cap](https://agentdrives.com/standard#pay-05): **In the middle** 2 of 4 others (payments products) lower, 2 the same.
- [Every way in works for an agent](https://agentdrives.com/standard#in-11): **Ahead of most** 3 of 5 others (payments products) lower, 1 the same, 1 higher.
- [Descriptions that say when to use the tool](https://agentdrives.com/standard#mcp-04): **In the middle** 20 of 65 others (every product) lower, 30 the same, 15 higher.
- [Tool names that sort themselves](https://agentdrives.com/standard#mcp-03): **Level with most** 61 of 65 others (every product) the same, 4 lower.
- [Pages fit one fetch](https://agentdrives.com/standard#docs-08): **The same as all** 5 others (payments products).
- [A path written for agents](https://agentdrives.com/standard#docs-10): **The same as all** 5 others (payments products).
- [Fast to the first call](https://agentdrives.com/standard#in-03): **The same as all** 4 others (payments products).
- [One way to page through lists](https://agentdrives.com/standard#api-03): **The same as all** 4 others (payments products).
- [Real status codes](https://agentdrives.com/standard#err-01): **The same as all** 5 others (payments products).
- [Errors a program can read](https://agentdrives.com/standard#err-02): **In the middle** 1 of 4 others (payments products) lower, 2 the same, 1 higher.
- [Errors say what to do next](https://agentdrives.com/standard#err-03): **In the middle** 1 of 4 others (payments products) lower, 2 the same, 1 higher.
- [WebMCP tools on the web app](https://agentdrives.com/standard#proto-02): **The same as all** 5 others (payments products).
- [Typed, tight input schemas](https://agentdrives.com/standard#mcp-06): **Level with most** 39 of 65 others (every product) the same, 10 lower, 16 higher.
- [A tool list that fits](https://agentdrives.com/standard#mcp-11): **Behind most** 33 of 65 others (every product) higher, 16 the same, 16 lower.
- [Agents pick the right tool](https://agentdrives.com/standard#mcp-05): **Level with most** 44 of 65 others (every product) the same, 1 lower, 20 higher.
- [The best way in is built for agents](https://agentdrives.com/standard#in-12): **Level with most** 3 of 5 others (payments products) the same, 2 higher.
- [Sign-in for agents acting for a person](https://agentdrives.com/standard#in-08): **Behind most** 3 of 5 others (payments products) higher, 2 the same.
- [A request id on every answer](https://agentdrives.com/standard#err-07): **Behind most** 3 of 5 others (payments products) higher, 2 the same.
- [Export before leaving](https://agentdrives.com/standard#leave-03): **Behind most** 3 of 5 others (payments products) higher, 2 the same.
- [Truthful annotations](https://agentdrives.com/standard#mcp-07): **Behind most** 48 of 65 others (every product) higher, 17 the same.
- [Docs an agent can navigate](https://agentdrives.com/standard#docs-11): **Behind most** 4 of 5 others (payments products) higher, 1 the same.
- [Versions an agent can pin](https://agentdrives.com/standard#api-07): **The lowest result** All 4 others (payments products) higher.

[How each criterion is graded](https://agentdrives.com/standard)

## For the team behind PayPal

**6 things to fix for agents.**

Agent blockers: 3 found · Agent surfaces: 6 issues found. Safety review: 1 issue found.

Agents get stuck at Get in. Prove PayPal is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.

- Find: Clear
- Get in: Blocks agents
- Use: Not reached
- Pay: Not reached
- Leave: Not reached

[Claim PayPal, free](https://agentdrives.com/app/products?add=paypal.com&ref=listing) · [What a drive covers](https://agentdrives.com/method?via=md)

## Where PayPal fits

- Category: [Payments and finance](https://agentdrives.com/categories/finance?via=md), [Payments](https://agentdrives.com/categories/payments?via=md)
- Wall: [Bot checks](https://agentdrives.com/access/get-in/bot-checks) (kept our agent out), [DataDome bot check](https://agentdrives.com/vendors/datadome) (the check, and every product we met it at), [Let signed AI agents past your bot check](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check?via=md) (fix guide)
- Standards: [MCP](https://agentdrives.com/standards/mcp) (tools an agent can call), [OpenAPI](https://agentdrives.com/standards/openapi) (its API, described), [llms.txt](https://agentdrives.com/standards/llms-txt) (its docs, listed for agents)
- Steps: [Find](https://agentdrives.com/access/find), [Get in](https://agentdrives.com/access/get-in) (stopped here), [Use](https://agentdrives.com/access/use), [Pay](https://agentdrives.com/access/pay), [Leave](https://agentdrives.com/access/leave)
- Rivals: [Lemon Squeezy](https://agentdrives.com/tools/lemonsqueezy?via=md) (L1), [Mollie](https://agentdrives.com/tools/mollie?via=md) (L1), [Polar](https://agentdrives.com/tools/polar?via=md) (L1)

Data: [JSON](https://agentdrives.com/api/tools/paypal.json?via=md) · [Markdown](https://agentdrives.com/tools/paypal.md?via=md) · [History](https://agentdrives.com/tools/paypal/history?via=md) · [Atom](https://agentdrives.com/feeds/tools/paypal.atom) · [JSON Feed](https://agentdrives.com/feeds/tools/paypal.json) · licence [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/)

**Found an error?** [Tell us on this page](https://agentdrives.com/tools/paypal?via=md#correct) or read [how corrections work](https://agentdrives.com/corrections?via=md).
