paypal-best-practices

85 / 100 · Low risk

Fine to try.

By paypal/AI-Toolkit (GitHub) · coding · 48 stars · scanned at commit 89ac03f

PayPal integration guidance, code examples, and best practices. Use for checkout, card fields, BNPL, Pay Later, Venmo, subscriptions, invoicing, disputes, payouts, webhooks, APMs, JS SDK v5, JS SDK v6, createInstance, payment sessions, web components, Fastlane, payment links, donations, 3D Secure, vaulting, iDEAL, bank redirects, agentic commerce, or any PayPal architecture decision or code generation question.

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: api-m.sandbox.paypal.com

The author does not mention this.

Found in 21 places.

skills/paypal-best-practices/references/fastlane.md, line 67const response = await fetch("https://api-m.sandbox.paypal.com/v1/oauth2/token", {
skills/paypal-best-practices/references/fastlane.md, line 187const orderResponse = await fetch(`${PAYPAL_API_BASE_URL}/v2/checkout/orders`, {
skills/paypal-best-practices/references/js-sdk-v6.md, line 122const capture = await fetch(`/api/orders/${data.orderId}/capture`, { method: "POST" });

Show 17 more

skills/paypal-best-practices/references/js-sdk-v6.md, line 134const res = await fetch(`/api/orders/${data.orderId}/shipping`, {
skills/paypal-best-practices/references/js-sdk-v6.md, line 195await fetch(`/api/orders/${data.orderId}/capture`, { method: "POST" });
skills/paypal-best-practices/references/js-sdk-v6.md, line 312await fetch(`/api/orders/${data.orderId}/capture`, { method: "POST" });
skills/paypal-best-practices/references/js-sdk-v6.md, line 523const response = await fetch("https://api-m.sandbox.paypal.com/v1/oauth2/token", {
skills/paypal-best-practices/references/js-sdk-v6.md, line 619await fetch(`${PAYPAL_API_BASE_URL}/v2/checkout/orders`, {
skills/paypal-best-practices/references/webhook-sandbox.md, line 35curl -s -X POST https://api-m.sandbox.paypal.com/v1/oauth2/token \
skills/paypal-best-practices/references/webhook-sandbox.md, line 61curl -s -X POST https://api-m.sandbox.paypal.com/v1/notifications/webhooks \
skills/paypal-best-practices/references/webhook-sandbox.md, line 75curl -s -X GET https://api-m.sandbox.paypal.com/v1/notifications/webhooks \
skills/paypal-best-practices/references/webhook-sandbox.md, line 79curl -s -X GET "https://api-m.sandbox.paypal.com/v1/notifications/webhooks/$WEBHOOK_ID" \
skills/paypal-best-practices/references/webhook-sandbox.md, line 83curl -s -X PATCH "https://api-m.sandbox.paypal.com/v1/notifications/webhooks/$WEBHOOK_ID" \
skills/paypal-best-practices/references/webhook-sandbox.md, line 89curl -s -w "\n%{http_code}" -X DELETE "https://api-m.sandbox.paypal.com/v1/notifications/webhooks/$WEBHOOK_ID" \
skills/paypal-best-practices/references/webhook-sandbox.md, line 122PATCH_RESP=$(curl -s -w "\n%{http_code}" -X PATCH "https://api-m.sandbox.paypal.com/v1/notifications/webhooks/$EXISTING_ID" \
skills/paypal-best-practices/references/webhook-sandbox.md, line 150curl -s -X POST https://api-m.sandbox.paypal.com/v2/checkout/orders \
skills/paypal-best-practices/references/webhook-sandbox.md, line 177curl -s -X POST https://api-m.sandbox.paypal.com/v1/notifications/simulate-event \
skills/paypal-best-practices/references/webhook-sandbox.md, line 205curl -s -X POST https://api-m.sandbox.paypal.com/v1/notifications/verify-webhook-signature \
skills/paypal-best-practices/references/webhook-sandbox.md, line 262curl -s -X GET "https://api-m.sandbox.paypal.com/v1/notifications/webhooks-events?${QUERY}" \
skills/paypal-best-practices/references/webhook-sandbox.md, line 271RESP=$(curl -s -w "\n%{http_code}" -X GET "$URL" -H "Authorization: Bearer $ACCESS_TOKEN")

and 1 more places

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

skills/paypal-best-practices/references/webhook-sandbox.md, line 103mkdir -p -m 700 "$HOME/.claude" || { echo "Could not create $HOME/.claude — check permissions." >&2; exit 1; }

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'paypal-best-practices' ] || [ -L ~/.agents/skills/'paypal-best-practices' ]; then echo 'A skill folder named paypal-best-practices already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/paypal/AI-Toolkit' "$d" && git -C "$d" checkout --quiet '89ac03f4f7fe27a45163ebeae44a61899735cdd4' -- 'skills/paypal-best-practices' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/paypal-best-practices' ~/.agents/skills/'paypal-best-practices' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'paypal-best-practices' ~/.claude/skills/'paypal-best-practices' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for paypal/AI-Toolkit shows the score of its lowest-scoring skill.

SkillTrust badge for paypal/AI-Toolkit

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/paypal/AI-Toolkit.svg)](https://zalavijaysinh.github.io/skilltrust/repos/paypal/AI-Toolkit/)

Score history

Date	Version	Score
2026-11-07	`89ac03f`	85