Commerce & finance · wired today
What can agents actually do with PayPal?
Money data demands the strictest governance of anything agents touch. The PayPal connector is one of 205 executable connectors and gives agents 4 read-only tools, with the credential held in the vault and every call receipted.
The PayPal tool list, exactly as agents see it
list_transactions— List PayPal account transactions in a date window (Transaction Search API, max 31 days per call)list_invoices— List PayPal invoices, newest page firstget_invoice— Get one PayPal invoice by its invoice IDlist_disputes— List PayPal customer disputes raised against the account
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the PayPal connector needs
You provide client ID, client secret from your PayPal account; Quox sends it as OAuth client credentials. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: PayPal's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
This connector was blind shape-proven against the real PayPal API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.
PayPal integration FAQ
What can Quox agents do with PayPal?
Agents can run 4 read-only tools against PayPal: list transactions, list invoices, get invoice, list disputes. Every call is receipted in the evidence trail.
What does the PayPal integration need?
You provide client ID, client secret from your PayPal account; Quox sends it as OAuth client credentials. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my PayPal credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the PayPal connector?
This connector was blind shape-proven against the real PayPal API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.