Back to blogGuides

Stripe vs PayPal vs Square vs Adyen MCP Servers

By DReview Team · Published September 12, 2026 · Updated September 11, 2026

Key takeaways

Four official payment MCP servers, four different transports and tool surfaces. What each one actually exposes, and which fits your stack.

Every major payments platform now ships its own official MCP server, and on the surface they look interchangeable — connect one, give your agent the ability to handle payments. They aren't interchangeable. The four covered here differ in how you connect (a hosted remote endpoint vs. a locally run process), what they authenticate with, and — more importantly than either of those — what they actually let an agent do once connected.

What each one actually exposes as agent tools

Stripe MCP Server covers payments, customer management, subscriptions, and querying Billing data — Stripe's own agent toolkit, positioned around the parts of Stripe's API a developer would already be scripting against: creating charges, managing subscription state, pulling billing records.

PayPal Agent Toolkit exposes PayPal's Orders, Invoices, Subscriptions, and Dispute APIs. The inclusion of Disputes specifically is worth noting — that's PayPal's chargeback-handling surface, not just a way to take payments, and it's not something the other three list as an explicit tool category in their own descriptions.

Square MCP Server covers payments, catalog items, orders, and customer records — the catalog piece is the tell here: Square's whole product is built around unifying online and in-person selling, and exposing catalog management as an agent tool reflects that a Square integration is as likely to be managing what's for sale as it is processing a transaction.

Adyen MCP Server is the broadest surface of the four: Checkout, Payment Links, Modifications (cancelling or refunding authorized payments), and Management — merchant accounts, terminals, and webhooks. The terminal and merchant-account management tools reflect Adyen's own positioning as infrastructure for larger, often multi-channel operations rather than a single hosted checkout.

Transport and auth: the part that actually determines setup friction

This is where the four genuinely diverge, and it matters more for day-one setup than any feature difference above.

Stripe MCP Server runs as Stripe's own hosted remote server, authenticated via OAuth against your Stripe account — no local process to run, no API key to paste into a config file, just an OAuth flow the first time you connect.

PayPal Agent Toolkit runs locally, authenticated with a PayPal access token generated from your app's client ID and secret — the more traditional API-key-shaped setup, where you're the one managing where that token lives.

Square MCP Server is the one offering a genuine choice: connect to Square's hosted remote endpoint, or run the server locally — pick based on whether you'd rather manage a local process or authenticate against a hosted one.

Adyen MCP Server runs locally, and its own documentation is explicit that it expects a dedicated webservice user with role-specific permissions rather than a broad account credential — a stricter, more deliberately scoped setup than a bare API key.

All four are official, not third-party wrappers

Worth stating plainly, since it's not always true in this ecosystem: all four of these are published directly from the payment platform's own GitHub organization — Stripe's own agent-toolkit, PayPal's own agent-toolkit, Square's own square-mcp-server, and Adyen's own adyen-mcp. None of these are a community member's reverse-engineered wrapper around an undocumented API — they're maintained by the same team that maintains the platform's official SDKs, which matters specifically for a payments integration: the tool surface tracks the platform's real API changes directly, rather than lagging behind or drifting out of sync the way a third-party wrapper eventually does.

You don't have to pick exactly one

A common real-world setup, independent of MCP entirely, is running one processor as primary and a second as an alternative payment method at checkout — Stripe for the core integration, with PayPal added specifically because some customers want to check out with a PayPal balance rather than a card. That same pattern carries over cleanly to MCP: nothing about running Stripe MCP Server for your main billing operations prevents also connecting PayPal Agent Toolkit for order-side operations tied to PayPal-originated transactions. The two servers don't need to be aware of each other — an agent with both connected simply has more tools available, scoped to whichever platform actually processed a given transaction.

Which one actually fits your stack

Already using Stripe for billing or subscriptions? Stripe MCP Server is the direct extension of that — no new payment relationship to set up, and the hosted OAuth connection means less to configure than a locally-run alternative.

Selling to consumers who specifically want to check out with a PayPal balance instead of a card? PayPal Agent Toolkit is the one built around that flow, plus dispute handling if chargebacks are a real part of your volume.

Running a business that also sells in person, or need catalog and inventory alongside payments? Square MCP Server is the only one of the four with catalog management as a first-class tool category, reflecting Square's actual product shape.

Operating at a scale where you need your own merchant account management, physical terminals, or multi-market payment infrastructure? Adyen MCP Server is built for exactly that layer, with the broadest management-API surface of the four.

If you're in India specifically and none of the above quite fit your payment rails, Razorpay MCP Server is worth knowing about too — it's not part of this four-way comparison because it serves a different regional market, but it follows the same official-server pattern: real orders, payments, refunds, and settlements, authenticated with a Razorpay API key and secret. Razorpay, and all four covered above, are listed together under DReview's payments MCP server category if you want to compare every option in one place rather than just these five.

Where the underlying business models actually diverge

The MCP servers inherit real differences from the platforms behind them, not just cosmetic ones. Stripe operates as payment infrastructure that a developer programs directly against — its API is effectively the product, which is why its MCP server reads like a direct extension of code you might already be writing. PayPal operates as a closed consumer ecosystem with a very large existing user base, and its value is less about API flexibility and more about buyers who already trust and prefer paying through an account they use elsewhere. Adyen runs its own end-to-end payment processing with its own banking license, meaning it isn't depending on a third party to acquire transactions the way a platform built on top of existing processors would — which is also why its MCP server exposes terminal and merchant-account management as first-class tools: that infrastructure-level access only makes sense for a platform that actually owns that layer. Square sits closer to Stripe in developer-facing shape but is built around the specific reality of a business that sells both online and through a physical point-of-sale system.

None of this changes which tools each MCP server exposes — that's covered above — but it explains why the tool surfaces look the way they do, and it's the same reasoning worth applying if you're choosing a processor for the first time rather than just picking which MCP server to connect to one you've already committed to.

The permission question that matters more than which one you pick

Every one of these servers can, in some form, move real money or touch real customer payment data. Before connecting any of them to an agent that isn't just yours to experiment with, the actual question isn't "which platform has the best API" — it's which specific tools the connected server is scoped to. Adyen's own setup guidance recommending a role-scoped webservice user rather than a full-access credential is the right instinct to apply across all four: if the integration only ever needs to create payment links and check their status, it shouldn't also be carrying refund or account-management permissions just because the underlying API key happens to have them. Adyen MCP Server and Square MCP Server both support scoping which specific tools get exposed at launch rather than turning on everything the API can do — check for that option on whichever one you install, and use it.

Test mode isn't optional during setup

Every one of these platforms has a test or sandbox environment, and there's no good reason to skip straight to live credentials while you're still confirming the agent behaves the way you expect. Stripe, PayPal, Square, and Adyen all separate test and live API keys or accounts at the platform level, independent of the MCP server itself — the server just uses whichever credential you give it. Connect with test credentials first, watch what the agent actually does when asked to create a payment or issue a refund, and only switch to live once that behavior matches what you intended. This matters more here than with a typical read-only integration, precisely because the failure mode isn't a wrong answer in a chat window — it's a real transaction.

FAQ

Which payment MCP server is easiest to set up?

Stripe MCP Server, since it runs as Stripe's own hosted remote server with OAuth — there's no local process to run or API key to manage. Square MCP Server offers a similar hosted option as an alternative to running it locally.

Which one should I use if I need refunds and disputes handled?

PayPal Agent Toolkit explicitly lists Disputes as a tool category, which the other three don't call out separately. Adyen MCP Server also supports cancelling/refunding authorized payments through its Modifications tools.

Can I limit which of these tools an agent is allowed to use?

Adyen MCP Server and Square MCP Server both support scoping which specific tools are exposed rather than enabling everything the underlying API can do — use that instead of granting a full-access credential to a connected agent.

Do any of these support in-person or point-of-sale payments?

Square is the one built around that use case specifically — its MCP server's catalog-management tools reflect Square's product being built for unified online and in-person selling, which the other three don't expose in the same way.

What if my business is in India and these don't fit?

Razorpay MCP Server follows the same official-server pattern (orders, payments, refunds, settlements) but serves the Indian market specifically rather than being a fifth entry in this particular comparison.