Connect your AI Agents to PayPal in minutes

What is a PayPal MCP server?

It’s an MCP server that lets you access data and functionality from PayPal via tools. Your agents can use these tools to create invoices, list all recent disputes, confirm orders, and more.

PayPal offers an official MCP server here. You can also access a PayPal MCP server via a 3rd-party platform, like Merge Agent Handler.

What are some common tools for a PayPal MCP server?

Here are some popular options broken down by object types:

Invoices

• <code class="blog_inline-code">list_invoices</code>
• <code class="blog_inline-code">get_invoice</code>
• <code class="blog_inline-code">update_invoice</code>
• <code class="blog_inline-code">delete_invoice</code>

Orders

• <code class="blog_inline-code">create_order</code>
• <code class="blog_inline-code">confirm_order</code>
• <code class="blog_inline-code">authorize_order</code>
• <code class="blog_inline-code">update_order</code>

Payments

• <code class="blog_inline-code">get_authorized_payment</code>
• <code class="blog_inline-code">reuthorize_payment</code>
• <code class="blog_inline-code">get_captured_payment</code>
• <code class="blog_inline-code">get_refund</code>

Disputes

• <code class="blog_inline-code">list_disputes</code>
• <code class="blog_inline-code">get_dispute</code>
• <code class="blog_inline-code">escalate_dispute</code>
• <code class="blog_inline-code">provide_dispute_evidence</code>

How can I use a PayPal MCP server?

Here are some common use cases:

• Automate refunds and disputes: Pull transaction details, gather supporting evidence, and submit dispute responses or issue refunds with consistent handling

• Reconcile payments with internal records: Use transaction and payout data to match PayPal activity to invoices, orders, or subscription records and flag exceptions for review

• Daily cash reporting: Use PayPal payouts, fees, and refund data to produce a daily snapshot of gross volume and net cash movement for finance

• Fraud and risk triage: Use patterns in refunds, disputes, and transaction metadata to route suspicious activity into an investigation queue

• Payment support: Use PayPal tools to answer questions like “where is my refund,” “did this payment go through,” and “what’s the status” with accurate, up-to-date details

What makes Merge Agent Handler’s PayPal MCP server better than alternative PayPal MCP servers?

Here are a few reasons:

• Enterprise-grade authentication management: Merge Agent Handler provides built-in authentication flows that guide users through securely connecting third-party systems. This removes the need for developers to build and maintain authentication infrastructure themselves
  

• Security gateway with data loss protection: All tool inputs and outputs are scanned through a security gateway that can block, redact, or modify sensitive data according to configured rules. This helps prevent agents from misusing sensitive information
  

• Real-time observability and audit logs: Agent Handler tracks every tool call made by an AI agent, along with the underlying API request. Fully-searchable logs allow developers to audit behavior, debug issues, and monitor system interactions in real time
  

• Built-in connector management: Using Connector Studio, developers can modify existing connectors or add new tools to customize integrations for their specific use cases

Can I set custom security rules for PayPal tool calls in Merge Agent Handler?

Yes, Merge Agent Handler includes a security gateway with data loss protection (DLP) that scans tool inputs and outputs for sensitive data. Developers can configure rules to block, redact, or mask specific data fields or types of information.

• Prevent refund fraud and revenue leakage: Block refund-related tool calls that don't meet your policy, such as refunds over a dollar threshold, refunds outside an allowed time window, or refunds without an approved reason code

• Stop sensitive payment data from ending up in tickets and notes: Block or redact card-like numbers and other sensitive strings before a PayPal write call succeeds

• Enable support to help customers without exposing PII: Redact payer emails, phone numbers, and addresses in PayPal tool outputs so support can confirm status while limiting what they can see and repeat back to customers

• Reduce the blast radius of account takeovers and prompt injection: Hard-block bulk “list all transactions” style calls or unusually large date ranges so an attacker can't use an agent to exfiltrate months of payment history

• Enforce separation of duties between teams: Allow read-only PayPal tools for support workflows, but only allow refund and payout tools in a Finance tool pack so the agent can't take money-moving actions in the wrong context

How can I start using Merge Agent Handler’s PayPal MCP server?

You can follow these steps:

1. Sign up for Merge Agent Handler and grab your Agent Handler API key, since your MCP client will use it as a bearer token when calling the Agent Handler MCP endpoint.

2. Create a Tool Pack for your PayPal workflow, because Tool Packs define exactly which connectors and tools your agent is allowed to use.

3. Add the PayPal connector to that Tool Pack and select only the PayPal tools you want exposed for the workflow.

4. Create a Registered User (or decide on a service account pattern), since this identity is what scopes credentials and audit logs for tool calls.

5. Authenticate PayPal for that registered user using Merge Link (or Magic Link), so PayPal tools can run with the right credentials without you handling third-party tokens directly.

6. Copy the MCP entry URL that includes your Tool Pack ID and Registered User ID, and add it to your MCP client (Cursor, Claude Desktop, VSCode, Windsurf, etc.).

7. Configure your MCP client to send <code class="blog_inline-code">Authorization: Bearer <AGENT_HANDLER_API_KEY></code> on requests to that MCP URL, then start by running <code class="blog_inline-code">list_tools</code> and a simple PayPal read call to confirm everything is wired up.

8. Validate behavior in the Playground and Logs, and tighten the Tool Pack and rules once you confirm the happy path works (especially before enabling money-moving tools like refunds or payouts).