Create PayPal invoice links, create or send invoices in bulk (with explicit user confirmation), and list PayPal account transactions through the PayPal MCP server.
Adding PayPal provisions three things in your zone: an upstream resource pointing at https://mcp.paypal.com/mcp (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with PayPal’s OAuth issuer.
When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream PayPal token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s identity provider, access policies, and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.
Tools the upstream server exposes through the Keycard MCP Gateway.
PayPal exposes 4 tools through the gateway:
- create_invoice
- Create a PayPal invoice link
- create_bulk_invoices
- Create multiple invoices concurrently; validate payloads and get user approval before calling
- send_bulk_invoices
- Send multiple invoices concurrently (irreversible); confirm invoice IDs and send options with the user first
- list_transactions
- Fetch details of PayPal account transactions
Install
Section titled “Install”Add PayPal to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.
-
Open the catalog
In your zone’s Keycard Console, go to Applications → Add Application → Explore MCP Servers.
-
Find and install PayPal
Search for
PayPalin the catalog and click Install. -
Connect your development tool
Once installed, PayPal appears on the Applications page with a Keycard MCP Gateway URL. Use the Install dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.
Related
Section titled “Related”- Catalog overview - browse other MCP and API servers
- Access policies - control who can use PayPal
- Identity providers - control who can sign in