| AUTH-01 | OAuth2 token | POST /v1/oauth2/token | All | API | Pass | expires_in=32400s |
| AUTH-02 | Token introspection | POST /v1/oauth2/token/introspect | All | API | Not tested | |
| ORD-01 | Create order | POST /v2/checkout/orders | Digital packs | API | Pass | order 5L956427BL826910K, status CREATED |
| ORD-02 | Get order | GET /v2/checkout/orders/{id} | All | API | Not tested | |
| ORD-03 | Capture order | POST /v2/checkout/orders/{id}/capture | Digital packs | API + buyer | Not tested | Buyer approval |
| ORD-04 | Authorize order | POST /v2/checkout/orders/{id}/authorize | Services | API + buyer | Not tested | Buyer approval |
| ORD-05 | Void authorization | /v2/payments/authorizations/{id}/void | Services | API | Not tested | |
| ORD-06 | Capture authorized payment | /v2/payments/authorizations/{id}/capture | Services | API | Not tested | |
| PAY-01 | Refund capture | POST /v2/payments/captures/{id}/refund | All | API | Not tested | |
| PAY-02 | Get capture details | GET /v2/payments/captures/{id} | Reporting | API | Not tested | |
| CAT-01 | Create product | POST /v1/catalogs/products | Memberships | API | Pass | product PROD-5BT193075G744534P |
| CAT-02 | List products | GET /v1/catalogs/products | Memberships | API | Not tested | |
| SUB-01 | Create plan | POST /v1/billing/plans | Memberships | API | Pass | plan P-7JC06884FP1949709NKTJUNQ, USD only |
| SUB-02 | List plans | GET /v1/billing/plans | Memberships | API | Pass | count=1 |
| SUB-03 | Create subscription | POST /v1/billing/subscriptions | Memberships | API + buyer | Not tested | Buyer approval |
| SUB-04 | Get / list subscriptions | GET /v1/billing/subscriptions | Memberships | API | Not tested | |
| SUB-05 | Cancel subscription | /v1/billing/subscriptions/{id}/cancel | Memberships | API | Not tested | Access revoke |
| SUB-06 | Suspend / activate | /v1/billing/subscriptions/{id}/suspend | Memberships | API | Not tested | |
| SUB-07 | List subscription transactions | /v1/billing/subscriptions/{id}/transactions | Memberships | API | Not tested | Reconciliation |
| SUB-08 | Trials / setup fees | Plan overrides | Memberships | API | Not tested | |
| INV-01 | Create draft invoice | POST /v2/invoicing/invoices | Services | API | Fail | NOT_AUTHORIZED — invoicing not enabled for app/account |
| INV-02 | List / search invoices | GET /v2/invoicing/invoices | Services | API | Not tested | |
| INV-03 | Send / remind invoice | /v2/invoicing/invoices/{id}/send | Services | API | Not tested | |
| INV-04 | Cancel invoice | /v2/invoicing/invoices/{id}/cancel | Services | API | Not tested | |
| INV-05 | Record payment | /v2/invoicing/invoices/{id}/payments | Services | API | Not tested | Out-of-band |
| INV-06 | QR code | /v2/invoicing/invoices/{id}/generate-qr-code | Services | API | Not tested | |
| RPT-01 | Balances | GET /v1/reporting/balances | Reporting | API | Not tested | |
| RPT-02 | Transaction search | GET /v1/reporting/transactions | Reporting | API | Not tested | |
| PAYOUT-01 | Single payout | POST /v1/payments/payouts | Outbound | API | Not tested | Approval-gated |
| PAYOUT-02 | Batch payout | POST /v1/payments/payouts | Outbound | API | Not tested | Approval-gated |
| WBH-01 | Create webhook | /v1/notifications/webhooks | All | API | Not tested | Fulfillment |
| WBH-02 | Verify signature | /v1/notifications/verify-webhook-signature | All | API | Not tested | Security |
| WBH-03 | List event types | /v1/notifications/webhooks-event-types | All | API | Not tested | |
| WBH-04 | Simulate event | Webhook simulator | All | Dashboard | Not tested | No real payment |
| DSP-01 | List disputes | GET /v1/customer/disputes | All | API | Not tested | |
| VAULT-01 | Store payment method | /v1/vault/... | Memberships | API | Not tested | Approval-gated |
| IDN-01 | Log in with PayPal | OIDC | All | Browser | Not tested | |