PayPal preview

Configure PayPal webhook verification and understand the development preview's payment tracking coverage and release limits.

PayPal is a development preview. Checkout, subscription access management, partner approval, and controlled live certification are incomplete.

Connect a REST application#

Choose PayPal in Marketplace and select the correct environment. Store a JSON credential with clientId and clientSecret. Register the connection's webhook URL on the same PayPal REST application and save its webhook ID as config.webhookId. These credentials stay on the marketplace service. A Production connection cannot be activated yet: PayPal production tracking stays off until certification is complete.

The adapter obtains a short-lived access token and sends the original event JSON with its transmission headers to PayPal's verification API. Invalid signatures are rejected. Verification outages return a retryable response. Simulator events are not a replacement for real sandbox events. PayPal webhook verification

Supported event normalization#

EventDevelopment behavior
PAYMENT.CAPTURE.COMPLETEDFetch the parent order. Track one mapped item in one purchase unit. Use its SKU for the product mapping and custom ID for the merchant customer.
PAYMENT.SALE.COMPLETEDFetch the related subscription. Map its plan ID and use its merchant-supplied custom ID. Record the distinct payment.
PAYMENT.CAPTURE.REFUNDEDRecord a completed refund against the original capture.
PAYMENT.SALE.REFUNDEDRecord a completed refund against the original sale.
Approval, activation, pending captureThese events do not prove payment and do not create revenue.

Amounts are parsed from decimal strings. Unsupported precision, currency, overflow, missing mappings and ambiguous multi-item attribution fail rather than inventing a value. Unsupported events do not grant access.

Required before production#

Complete environment/account scoping, subscription access lifecycle, refund and dispute reconciliation, broader order allocation, OAuth token caching and rate budgets, operational replay tooling, approved merchant onboarding, and sandbox/live tests. PayPal webhooks alone do not establish a complete entitlement integration.