A comprehensive developer toolkit for integrating PayPal REST APIs with a focus on security, webhook verification, and automated payment flows.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install paypal
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install paypal using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is PayPal?
The PayPal integration skill for Openclaw Skills provides a robust framework for developers to implement reliable payment processing. It simplifies the complexities of the PayPal REST API by providing structured patterns for OAuth token management, environment-specific configurations, and secure checkout implementations. By following the best practices outlined in this skill, developers can ensure their payment integrations are both secure and scalable.
This skill emphasizes security by mandating server-side validation and API-based webhook verification. It helps prevent common pitfalls such as client-side tampering, duplicate webhook processing, and currency decimal errors, making it an essential resource for building production-ready fintech applications.
PayPal Use Cases
- Building secure checkout flows for e-commerce applications.
- Implementing recurring subscription billing and lifecycle management.
- Handling real-time order updates via secure webhook notifications.
- Managing automated payouts to vendors or service providers.
- Developing dispute and refund management systems.
How PayPal Works
- Initialize the environment by selecting between the Sandbox and Production API endpoints.
- Implement the OAuth 2.0 flow to obtain and automatically refresh access tokens every 8 hours.
- Define the transaction intent as either CAPTURE for immediate payment or AUTHORIZE for delayed funds collection.
- Execute server-side validation after client-side approval to verify the order status, amount, and merchant ID.
- Configure a webhook listener that uses the PayPal API to verify signatures and processes events using idempotency logic.
PayPal Setup
To get started with this PayPal integration in Openclaw Skills, prepare your developer credentials and configure your environment.
# Install the necessary environment dependencies
npm install @paypal/checkout-server-sdk
# Set your environment variables
export PAYPAL_CLIENT_ID='your_client_id'
export PAYPAL_CLIENT_SECRET='your_secret'
export PAYPAL_MODE='sandbox' # or 'live'
PayPal Data Schema & Taxonomy
The skill organizes payment data and metadata to ensure consistency across the API lifecycle. It uses the following data structures:
| Property | Type | Description |
|---|---|---|
intent |
String | Defines the payment action (CAPTURE vs AUTHORIZE) |
purchase_units |
Array | Contains amount details and currency codes (as strings) |
webhook_event |
Object | The raw event body received from PayPal notifications |
verification_status |
String | The result of the mandatory API signature check (e.g., SUCCESS) |
order_status |
Enum | Tracks the order lifecycle: CREATED, APPROVED, COMPLETED |
PayPal Advanced Features
- Intelligent OAuth token lifecycle management with automated refresh logic.
- Mandatory API-based webhook signature verification to prevent spoofing.
- Idempotency checks using database tracking for all incoming webhook event IDs.
- Strict currency decimal handling to prevent API errors for zero-decimal currencies like JPY.
- Comprehensive server-side reconciliation to ensure client-side data matches authorized order details.
SKILL.md
Loading
Related Openclaw Skills
Payments
A comprehensive framework for integrating secure payment gateways, subscription billing, and checkout flows into modern applications.
Pay
An intelligent financial management skill for optimizing payment methods, maximizing rewards, and securing transactions.
Passwords Skill
A secure local credential vault with OS keychain integration and encrypted storage designed for AI agent workflows.
Passkey
A comprehensive implementation guide for integrating secure, phishing-resistant WebAuthn passkeys while avoiding common security and compatibility traps.
Paywall
A comprehensive framework for building and optimizing high-converting paywalls for mobile apps and web SaaS platforms.
PDF Generator
Generate professional PDFs from Markdown, HTML, data, or code using industry best practices and optimized print patterns.
Featured*
