PayPal AI Toolkit is a plugin that connects AI coding agents with PayPal APIs and sandbox MCP servers, giving them PayPal-specific guidance and tools. It helps developers build and work with payment, subscription, invoice, and dispute integrations in Claude Code, OpenAI Codex, and other compatible agents. The catalogue entries are its commands, skills, plugins, and MCP integration.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add paypal/AI-Toolkit --skill paypal-routinggit clone --depth 1 https://github.com/paypal/AI-ToolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/paypal/ai-toolkit/paypal-routing)<a href="https://agentmods.dev/skills/paypal/ai-toolkit/paypal-routing"><img src="https://agentmods.dev/badge/skills/paypal/ai-toolkit/paypal-routing/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/paypal/ai-toolkit/paypal-routing"><img src="https://agentmods.dev/badge/skills/paypal/ai-toolkit/paypal-routing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.03874 |
| Opus 5.5 | $0.00024 | $0.01550 |
| Sonnet 5.5 | $0.00012 | $0.00775 |
| Haiku 4.5 | $0.00006 | $0.00387 |
Grade A, and why
paypal-routing scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Webhooks never have a matching MCP tool, by design. For any webhook request, go straight to `references/webhook-sandbox.md` and its `curl` calls instead of enumerating `mcp__paypal-sandbox__*`/`mcp__paypal-prod__*` first How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PayPal Command Routing
When this skill activates, follow the routing table below. For reference routes, load the paypal-best-practices skill and read the specified reference file before answering — the reference files contain current URLs and verified code examples that override training knowledge.
RulesHub Language-Specific Snippet Fetching
When a RulesHub rules.md is fetched and code generation is required:
- Detect the user's language from their codebase, file extensions, imports, or explicit mention. Common values:
javascript,typescript,python,java,csharp,php,ruby. - WebFetch the language-specific snippet for the relevant operation. Replace
{language}and{pack}with the detected values:- SDK init:
https://raw.githubusercontent.com/paypal/ruleshub/main/{pack}/snippets/{language}/sdk-initialization.md - Create order:
https://raw.githubusercontent.com/paypal/ruleshub/main/{pack}/snippets/{language}/create-order.md - Capture order:
https://raw.githubusercontent.com/paypal/ruleshub/main/{pack}/snippets/{language}/capture-order.md - Client token:
https://raw.githubusercontent.com/paypal/ruleshub/main/{pack}/snippets/{language}/client-token-generation.md
- SDK init:
- Generate code strictly from the fetched snippet — do not fall back to training knowledge for implementation patterns.
- Only fetch snippets needed for the user's request — do not fetch all languages or all snippets.
Pack values: paypal-checkout/standard-checkout, paypal-checkout/expanded-checkout, paypal-checkout/enterprise-checkout, paypal-bnpl-us, upgrade-to-v6/v5-to-v6-upgrade, upgrade-to-v6/v4-to-v6-upgrade, upgrade-nvp-soap-to-rest.
Routing Table
| User Intent | Action |
|---|---|
| Explain an error, error code, HTTP status, 400, 401, 403, 404, 422, 429, 500, INVALID_REQUEST, UNAUTHORIZED, INSTRUMENT_DECLINED, RATE_LIMIT, debug_id | Run /paypal:explain-error with the error as argument |
| Set up PayPal, configure plugin, check connection, is plugin working, token expired, refresh token, generate access token, OAuth | Run /paypal:setup |
| Sandbox setup, developer account, getting started, credentials, dashboard, client ID, client secret, base URL | Run /paypal:sandbox |
| Test accounts, test cards, simulate decline, test BNPL, test Venmo, test subscriptions, test disputes | Run /paypal:test-accounts |
| Scan my code, check my integration, find issues, something is broken, pre-launch review, security audit, payments failing, webhooks not firing, Venmo not showing, subscription not billing | Run /paypal:doctor with the symptom as argument |
| Security review, check for leaked credentials, pre-launch checklist | Run /paypal:doctor security or /paypal:doctor pre-launch |
| Fix all issues in my PayPal code | Run /paypal:doctor fix-all |
| How to accept payments, add PayPal button, checkout flow, Orders API, server-side integration, payment link, payment links, pay link, React PayPal, @paypal/react-paypal-js, authorize vs capture, deferred capture, donate button, donations | Load the paypal-best-practices skill, then read references/checkout.md (v5) or references/js-sdk-v6.md (v6). Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/paypal-checkout/standard-checkout/rules.md for authoritative integration rules. |
| Advanced Card Fields, Apple Pay, Google Pay, APMs, Expanded Checkout, bank redirect, iDEAL, Bancontact, BLIK, Przelewy24, Pay upon Invoice, Ratepay, domain association, regional payment methods | Load the paypal-best-practices skill, then read references/expanded-checkout.md (v5) or references/js-sdk-v6.md (v6). Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/paypal-checkout/expanded-checkout/rules.md for authoritative integration rules. |
| Add Venmo, Venmo button, Venmo eligibility, isEligible, eligibility check, Venmo app | Load the paypal-best-practices skill, then read references/venmo.md (v5) or references/js-sdk-v6.md (v6). Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/paypal-checkout/expanded-checkout/rules.md for authoritative integration rules. |
| Pay Later, installments, BNPL messaging, Pay in 4, financing, BNPL banner, Pay Later banner, Pay Later eligibility | Load the paypal-best-practices skill, then read references/bnpl.md (v5) or references/js-sdk-v6.md (v6). Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/paypal-bnpl-us/rules.md for authoritative BNPL rules. |
| Recurring billing, subscriptions, plan management, free trial, trial period, upgrade plan, downgrade plan, plan revision | Load the paypal-best-practices skill, then read references/subscriptions.md (v5) or references/js-sdk-v6.md (v6) |
| Disputes, chargebacks, refunds, evidence, provide evidence, dispute lifecycle, dispute stage, INQUIRY, CLAIM | Load the paypal-best-practices skill, then read references/disputes-refunds.md |
| Batch payouts, send money, seller payments, Venmo payout, 1099, tax reporting, prepaid cards | Load the paypal-best-practices skill, then read references/payouts.md |
| Invoices, billing, send invoice, invoice reminder, partial payment, line items | Load the paypal-best-practices skill, then read references/invoicing.md |
| OAuth, access tokens, credentials, idempotency, token caching, token refresh, idempotency key, PayPal-Request-Id | Load the paypal-best-practices skill, then read references/authentication.md |
| Webhook verification, event handling, signature check, webhook simulator, test webhooks, event types, PAYMENT.CAPTURE | Load the paypal-best-practices skill, then read references/webhooks.md |
| Webhook subscription CRUD, simulate-event endpoint, webhooks-events history, resend a webhook event, ngrok for PayPal webhooks, webhook tunnel requirement, show recent webhook events, list my webhooks, show my webhook subscriptions, delete a webhook, check webhook delivery history, webhook events from a specific or trivial-sounding time window (including "0 seconds"/"0 minutes" or other degenerate windows), test the full webhook lifecycle, walk me through webhooks, subscribe and test a webhook end to end, experience the webhook flow hands-on, fire a real webhook event, watch for webhook events, continuous webhook polling | Load the paypal-best-practices skill, then read references/webhook-sandbox.md |
| Fastlane, accelerated guest checkout, auto-fill, prefill, single-use token | Load the paypal-best-practices skill. Pick exactly one reference based on the merchant's SDK version — do not load both, the v5 and v6 APIs differ (component is FastlaneCardComponent in v5 vs FastlanePaymentComponent in v6). If the merchant is on v5 (paypal.Fastlane(), URL-loaded components=fastlane), read references/fastlane.md. If on v6 (createInstance, sdkInstance.createFastlane(), client token), read references/js-sdk-v6.md. If the SDK version is unclear, ask the user before generating code. For v6 also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/upgrade-to-v6/v5-to-v6-upgrade/snippets/javascript/fastlane-integration.md for the authoritative v6 snippet, and https://raw.githubusercontent.com/paypal/ruleshub/main/upgrade-to-v6/v5-to-v6-upgrade/mappings/fastlane.json for the v5↔v6 API mapping. |
| 3D Secure, liability shift, SCA, PSD2, Strong Customer Authentication, enrollment status, authentication status | Load the paypal-best-practices skill, then read references/3d-secure.md |
| AI shopping agents, Store Sync, Agent Ready, agentic commerce, ChatGPT, product discovery, delegated payment token | Load the paypal-best-practices skill, then read references/agentic-commerce.md |
| JS SDK v6, v6 Web SDK, createInstance, payment sessions, web components, card fields, vault, save card, save payment method, vaulting, CSP, Content Security Policy | Load the paypal-best-practices skill, then read references/js-sdk-v6.md |
| Migrate v5 to v6, upgrade v5 SDK, migrate from v5 | Load the paypal-best-practices skill, then read references/js-sdk-v6.md. Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/upgrade-to-v6/v5-to-v6-upgrade/rules.md for authoritative migration mappings and multi-language snippets. |
| Migrate v4 to v6, upgrade v4 SDK, upgrade checkout.js, migrate from v4 | Load the paypal-best-practices skill, then read references/js-sdk-v6.md. Also WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/upgrade-to-v6/v4-to-v6-upgrade/rules.md for authoritative migration mappings and multi-language snippets. |
| Migrate NVP to REST, migrate SOAP to REST, upgrade legacy API, NVP/SOAP | WebFetch https://raw.githubusercontent.com/paypal/ruleshub/main/upgrade-nvp-soap-to-rest/rules.md for authoritative migration mappings and multi-language snippets. |
| Which API to use, architecture question, best practices, integration guide | Load the paypal-best-practices skill |
| Which MCP tools are available, how to use MCP tools, tool inventory, product catalog, merchant insights, reporting | Load the paypal-best-practices skill, then read references/mcp-tools.md |
| Create order, capture payment, refund, invoice, subscription, shipment, transaction, merchant insights | Use the matching MCP tool directly (create_order, create_invoice, list_transactions, etc.) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed · +8 lines b3f53619bc9a
- 18d ago Changed 75ef7ea2bd11
- 1mo ago Changed 34a11e556981
- 1mo ago First seen · 104 lines · 61 tokens per session scan A 3c99aba0118d
paypal-routing is a skill published in the GitHub repository paypal/AI-Toolkit (35 stars, last pushed 10d ago), licensed Apache-2.0. It adds 61 tokens to every session and 3,874 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ecommerce-seo
E-commerce SEO audit for online stores (WooCommerce, Shopify, Magento, custom). Covers category / product listing pages (PLP), product detail pages (PDP), faceted navigation and its crawl-budget and duplicate-content traps, pagination, canonicals for variants and filters, out-of-stock / discontinued products, internal…
paid-ads-amazon
Plan and review Amazon Ads with margin-aware ACoS, product, and search-term guardrails. Use for Amazon advertising, Sponsored Products, Sponsored Brands, Sponsored Display, ASIN targeting, Amazon ACoS, or Amazon Ads performance exports.
data-engineering
Builds and operates data pipelines — ingestion, transformation, orchestration, quality testing, and reliability of data delivery. Use this to design or debug a pipeline, decide batch versus streaming, add data quality checks, handle late or duplicate data, or work out why a dashboard's numbers changed without anyone…
pricing-and-packaging
Sets price, structures packages and tiers, and designs the monetization surfaces that carry them — upgrade paths, paywalls, and offer construction. Use this to set or change pricing, design or restructure tiers, choose a pricing metric, build an offer, design upgrade prompts and paywalls, or evaluate whether a pricing…
api-design
Designs interfaces that survive their consumers — resource modeling, errors, versioning, pagination, and compatibility. Use this to design a new API, review one before it ships, decide how to version or deprecate, fix an interface consumers keep misusing, or work out whether a change is breaking.
ash-framework
Ash Framework — resources, actions, policies, aggregates, calculations, AshPhoenix.Form, LiveView, migrations. Use when generating resources via mix ash.codegen, editing changes, checks, types, validations, or domain code interfaces.