Holds of up to 180 days
PayPal may hold your business balance for up to 180 days if reasonably needed to protect against liability or if you breach the Acceptable Use Policy, and longer under court or regulatory orders. [5]
Guides · payments · Verification-gated
A verified PayPal Business account plus a REST app in the PayPal Developer Dashboard, giving a sandbox and a live client ID and secret for PayPal Checkout and other REST APIs.
Researched · not yet run liveLast researched 25 October 2026 · PayPal · provider site
One PayPal login opens both paypal.com and the Developer Dashboard. Live REST apps belong to a verified Business (or Premier) account; sandbox apps are tied to fictitious sandbox business accounts created automatically.
Sandbox credentials never work against the live host, and live credentials never work in sandbox.
Platform (marketplace) app types and some features such as Payouts need extra approval from PayPal.
Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.
You sign up for a PayPal Business account on paypal.com yourself, entering the legal business details and accepting the User Agreement. verapli can highlight fields but never creates the account or accepts terms.
Where: https://www.paypal.com/business
Confirm your email, link and confirm a bank account, and answer any identity or business-information requests in the PayPal account. Live credentials need a verified account.
Where: https://www.paypal.com/myaccount/summary
Log in at developer.paypal.com with the same PayPal Business login. Sandbox test accounts appear under Testing Tools.
Where: https://developer.paypal.com/dashboard/
In Apps & Credentials on the Sandbox tab, use the Default Application or Create App, choose Merchant (or Platform) and a sandbox business account, then copy the client ID and secret. verapli captures the values by selector.
verapli captures PAYPAL_CLIENT_SECRET here by plain code: encrypted in your browser, never shown to AI.
Where: https://developer.paypal.com/dashboard/applications/sandbox
Switch the dashboard to Live, Create App, pick the feature permissions you need, and copy the live client ID and secret. Point the integration at api-m.paypal.com.
verapli captures PAYPAL_LIVE_CLIENT_SECRET here by plain code: encrypted in your browser, never shown to AI.
Where: https://developer.paypal.com/dashboard/applications/live
PayPal may review a newly registered live app; answer any reviewer questions sent by email. Features such as Payouts or reference transactions need separate allowlisting via PayPal.
Plain-English summary, not legal advice. Each card links its source.
PayPal may hold your business balance for up to 180 days if reasonably needed to protect against liability or if you breach the Acceptable Use Policy, and longer under court or regulatory orders. [5]
Controlling an account linked to another account that has engaged in restricted activities is itself restricted, so opening a second account after a limitation can make things worse. [5]
Taking payments for activities that need pre-approval (e.g. charities, airlines and charters, precious metals, payment facilitators) without getting it is prohibited. [6]
Giving false, inaccurate or misleading information, or refusing to confirm your identity, are restricted activities that can lead to limitation. [5]
Sandbox and live are fully separate; sandbox credentials and app ids do not work in production. [2]
| Env var | Secret | Format | What it is |
|---|---|---|---|
PAYPAL_CLIENT_ID | not secret | Sandbox REST app client ID (public identifier) | |
PAYPAL_CLIENT_SECRET | secret | Sandbox REST app client secret | |
PAYPAL_LIVE_CLIENT_ID | not secret | Live REST app client ID | |
PAYPAL_LIVE_CLIENT_SECRET | secret | Live REST app client secret |
Source [7]
The same entry as JSON: /api/v1/entries/paypal/developer-and-business · requirements /api/v1/requirements/paypal/developer-and-business · terms /api/v1/terms/paypal/developer-and-business.
claude mcp add --transport http verapli https://verapli.com/mcp
> "What do I need for PayPal Developer and Business account (REST API credentials), and how long will it take?"
→ tools/call requirements { "provider_id": "paypal/developer-and-business" }Provider rules change. This page is generated from verapli registry version 2026.1025.387; spotted something out of date? Tell us. PayPal is not affiliated with verapli.