Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | PayPal MCPMCP100 Selected | Stripe MCPMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP PayPal · Publisher source ↗ | First-party MCP Stripe · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Aug 14, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | Not documented | 1,743 GitHub stars · checked 2026-08-14T18:46:26.000Z |
| Shared repository stars | Not documented | 1,714 Shared repository stars (not MCP-specific) · checked 2026-08-14T18:46:26.000Z |
| External adoption evidence | Not documented |
|
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Local mode uses PAYPAL_ACCESS_TOKEN and PAYPAL_ENVIRONMENT. Remote mode supports PayPal login and consent or token authorization; PayPal publishes separate Sandbox and Production endpoints. | The hosted https://mcp.stripe.com endpoint uses Stripe OAuth. Stripe also documents a local npx option using STRIPE_SECRET_KEY; prefer restricted test-mode credentials when local-key authentication is necessary. |
| Cost | The MCP package is publicly available. Normal PayPal account, transaction, product, API, and merchant-service fees or limits remain applicable. | Stripe documents no separate MCP access fee. Normal Stripe product, transaction, account, and chosen AI-client charges still apply; ChatGPT custom connector availability also depends on an eligible ChatGPT plan. |
| Permissions | Capabilities depend on enabled tools and the PayPal credential and can include reads and mutations across invoices, orders, subscriptions, disputes, shipments, transaction details, and related merchant resources. | The hosted server receives OAuth access selected during Stripe authorization. The documented tool set includes read operations and write operations such as creating customers, products, prices, payment links, invoices, coupons, refunds, and disputes-related actions; actual access remains bounded by the authorized Stripe account and credential. |
| Data handling | The local MCP process sends merchant, customer, payment, and task data to PayPal APIs and returns results to the MCP client. The hosted option processes requests through PayPal's remote MCP service. | Requests and tool results pass between the MCP client, Stripe's hosted MCP endpoint, and the connected Stripe account. The server can return account and payment-related records plus Stripe knowledge-base content to the client. A local @stripe/mcp process receives the configured STRIPE_SECRET_KEY. Do not place live secret keys in shared configuration or logs. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Production access can create financial loss or customer-facing changes and can disclose transaction data. Start with Sandbox, keep credentials out of files and history, minimize tools, and require approval for every mutation. | This is a write-capable financial integration. Use test mode for evaluation, least privilege, explicit confirmation for every mutation, separate untrusted web content from payment actions, and revoke MCP sessions promptly when no longer needed. This review relies on publisher documentation and does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-07-24 |
| Candidate evidence | 2026-07-29T20:58:26.000Z | 2026-08-14T18:46:26.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →