Mcp Paypal

io.github.codesparPublished by GitHub account codesparv0.1.2Updated Oct 24, 2026

MCP server for PayPal — global payments + payouts: Orders v2, Payments, Subscriptions, Disputes

The publisher's own server: Paypal

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Local MCP server that lets an assistant create, capture, refund and pay out PayPal payments, manage subscriptions and handle disputes via the PayPal REST API.

What you can do
  • Create, fetch, authorize and capture PayPal orders, and capture or void authorizations
  • Refund captured payments and look up payment details
  • Create and inspect batch payouts and individual payout items
  • Create, fetch and cancel billing subscriptions
  • List and fetch disputes, and accept a dispute claim
  • List app webhooks and verify webhook event signatures
When to use it
Useful for merchants or marketplaces with a PayPal business account that want an assistant to drive checkout, payouts, subscriptions and dispute handling, ideally starting in the sandbox environment.
Requirements
Runs locally as an npm package over stdio (npx @codespar/mcp-paypal); desktop client only. Needs a PayPal REST app client id and secret in PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET, plus PAYPAL_ENV set to sandbox (default) or live. Network access to PayPal's API endpoints.
Before you install
The client secret grants full access to the PayPal app's payments; keep it out of logs and shared configs. Many tools move real money or change state: capturing, refunding, voiding, batch payouts, cancelling subscriptions and accepting dispute claims. Setting PAYPAL_ENV to live points everything at production. Arbitrary REST body fields are forwarded verbatim, so requests are not limited to the declared schemas.

Installation

In SourceWeft

  1. Open Mcp Paypal in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-paypal

MCP server for PayPal — global payments and payouts via the PayPal REST API.

Target customer: LatAm SaaS / marketplaces selling globally that already hold a PayPal merchant account and want agent-driven checkout, payouts, subscriptions, and dispute handling.

Tools (19)

ToolPurpose
create_orderCreate a PayPal Order via POST /v2/checkout/orders.
get_orderFetch a PayPal Order by id via GET /v2/checkout/orders/{id}.
capture_orderCapture payment for an approved order via POST /v2/checkout/orders/{id}/capture.
authorize_orderAuthorize payment for an approved order via POST /v2/checkout/orders/{id}/authorize.
capture_authorizationCapture a previously authorized payment via POST /v2/payments/authorizations/{id}/capture.
refund_captureRefund a captured payment via POST /v2/payments/captures/{id}/refund.
void_authorizationVoid (release) an unsettled authorization via POST /v2/payments/authorizations/{id}/void.
get_payment_detailsFetch a payment object by id via GET /v2/payments/{type}/{id}.
create_batch_payoutCreate a batch payout via POST /v1/payments/payouts.
get_payoutFetch a payout batch by id via GET /v1/payments/payouts/{batch_id}.
get_payout_itemFetch a single payout item by id via GET /v1/payments/payouts-item/{item_id}.
create_subscriptionCreate a billing subscription via POST /v1/billing/subscriptions.
get_subscriptionFetch a subscription by id via GET /v1/billing/subscriptions/{id}.
cancel_subscriptionCancel an active subscription via POST /v1/billing/subscriptions/{id}/cancel.
list_disputesList disputes via GET /v1/customer/disputes.
get_disputeFetch a dispute by id via GET /v1/customer/disputes/{id}.
accept_dispute_claimAccept liability for a dispute claim via POST /v1/customer/disputes/{id}/accept-claim.
list_webhooksList configured webhooks for the app via GET /v1/notifications/webhooks.
verify_webhook_signatureVerify a webhook event signature via POST /v1/notifications/verify-webhook-signature.

Install

bash
npm install @codespar/mcp-paypal

Environment

bash
PAYPAL_CLIENT_ID="..."       # REST app client idPAYPAL_CLIENT_SECRET="..."   # REST app client secret (OAuth2)PAYPAL_ENV="sandbox"         # 'sandbox' (default) or 'live'

Endpoints:

  • sandbox -> https://api-m.sandbox.paypal.com
  • live -> https://api-m.paypal.com

Authentication

PayPal REST APIs use OAuth2 client_credentials. The server posts CLIENT_ID:CLIENT_SECRET (Basic auth) to /v1/oauth2/token with grant_type=client_credentials and caches the bearer token until 60s before expiry, refreshing on demand.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-paypal
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-paypal

Notes

  • Amounts are objects in PayPal REST: { "currency_code": "USD", "value": "10.50" }. Values are decimal strings.
  • The server forwards arbitrary REST body fields verbatim under body for tools that accept them, so any field documented in the PayPal REST reference can be passed even if it's not in the MCP inputSchema.
  • For payment captures / refunds the PayPal-Request-Id header (idempotency) is forwarded when supplied.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/payments/paypal/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Paypal integrations