Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | PayPal MCPMCP100 Recommended | Google MCP Toolbox for DatabasesMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP PayPal · Publisher source ↗ | First-party MCP Google · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Sep 24, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | 12 GitHub stars · checked 2026-09-24T18:01:37.627000Z | 16,485 GitHub stars · checked 2026-09-24T04:14:16.258000Z |
| Package downloads / 30 days | 2,304 package downloads / 30 days · checked 2026-09-24T18:01:10.803000Z | No reliable download data |
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Local mode uses PAYPAL_ACCESS_TOKEN and PAYPAL_ENVIRONMENT. Remote mode supports PayPal login and consent or token authorization; PayPal publishes separate Sandbox and Production endpoints. | Authentication depends on the database source and can include database username/password, Google Cloud IAM, or other source-specific mechanisms. Use a dedicated read-only identity and secret manager or protected environment variables. |
| Cost | The MCP package is publicly available. Normal PayPal account, transaction, product, API, and merchant-service fees or limits remain applicable. | The Apache-licensed Toolbox and npm server have no documented MCP usage fee. Database services, Google Cloud resources, network transfer, observability backends, hosting, and the AI client may incur normal charges. |
| Permissions | Capabilities depend on enabled tools and the PayPal credential and can include reads and mutations across invoices, orders, subscriptions, disputes, shipments, transaction details, and related merchant resources. | Effective permissions come from each configured database identity and the enabled prebuilt or custom tools. Generic prebuilt sets can include schema discovery and execute_sql; custom tools can constrain statements, parameters, and accessible sources. |
| Data handling | The local MCP process sends merchant, customer, payment, and task data to PayPal APIs and returns results to the MCP client. The hosted option processes requests through PayPal's remote MCP service. | The Toolbox process connects directly to configured databases and returns selected schemas, rows, query results, and errors to the MCP client. Credentials may be supplied through environment variables or configuration; integrated cloud authentication and OpenTelemetry are available. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Production access can create financial loss or customer-facing changes and can disclose transaction data. Start with Sandbox, keep credentials out of files and history, minimize tools, and require approval for every mutation. | Generic SQL tools can expose or mutate large amounts of data and retrieved database text can carry prompt-injection content. Prefer a non-production replica, read-only credentials, allow-listed custom parameterized tools, query limits, audit logs, and no secrets in config. This review does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-07-24 |
| Candidate evidence | 2026-09-24T04:25:05.554391Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →