Create PayPal invoice links, create or send invoices in bulk (with explicit user confirmation), and list PayPal account transactions through the PayPal MCP server.
Install
Section titled “Install”Add PayPal to your zone and connect it to your MCP client.
Step 1 - Install in Keycard Console
Section titled “Step 1 - Install in Keycard Console”-
In your zone’s Keycard Console, go to Applications -> Add Application -> Explore MCP Servers.
-
Search for
PayPaland click Install. -
A browser tab opens to PayPal’s OAuth consent screen. Sign in and approve the requested permissions.
-
You’re redirected back. PayPal appears on the Applications page with a Keycard MCP Gateway URL.
Step 2 - Connect your MCP client
Section titled “Step 2 - Connect your MCP client”On the Applications page, click Add to Coding Agent next to PayPal and pick how you want to install:
- Cursor - opens a deeplink that hands the MCP config straight to Cursor. Click Install inside Cursor to finish.
- Claude Code - opens a dialog with a
claude mcp addcommand. Pick a scope (User, Project, or Local), then copy and run the command in your terminal. - Install manually - reveals the Server Name and Server URL to paste into any other MCP-compatible client.
Once connected, PayPal’s tools are available to the agent, scoped to whoever signs in to your zone.
What PayPal can do once installed.
PayPal provides 4 tools:
- create_invoice
- Create a PayPal invoice link
- create_bulk_invoices
- Create multiple invoices concurrently; validate payloads and get user approval before calling
- send_bulk_invoices
- Send multiple invoices concurrently (irreversible); confirm invoice IDs and send options with the user first
- list_transactions
- Fetch details of PayPal account transactions
Next steps
Section titled “Next steps”What to do once PayPal is installed.
Now do this
- Confirm the gateway works by asking your AI client to call one of the PayPal tools above.
Recommended
- Decide who can use it - write access policies scoped to the PayPal resource so only the right users and agents reach the tools.
- Watch the calls - every tool call lands in your audit log with user identity, resource, and policy decision.