{
 "categories": [
  "payments",
  "fintech"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-10-16",
   "fact": "homepage",
   "note": "The English homepage presents Paytrail as Finland's online payment provider and names the Merchant panel.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "name",
   "note": "The page title and body use the name Paytrail for the payment service.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "vendor",
   "note": "The footer prints Paytrail Oyj, Innova 2, Lutakonaukio 7, 40100 Jyv\u00e4skyl\u00e4.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "categories",
   "note": "The page describes online bank, card, and mobile payments for stores and digital services. Categories are payments and fintech.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "license",
   "note": "The page says there are no setup fees and that the service can be cancelled with one month's notice. It does not show a free product tier. The license is commercial.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "deployment",
   "note": "The Payment API endpoint is services.paytrail.com, Paytrail's hosted payment service. Deployment is saas.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "platforms",
   "note": "The Merchant panel is the browser tool for managing online payments. Platforms include web.",
   "source": "https://www.paytrail.com/en",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.exists",
   "note": "The reference documents the Paytrail Payment API, with the host services.paytrail.com and POST /payments.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.kinds[0]",
   "note": "Requests are HTTP calls such as POST /payments and GET /payments/{transactionId}. Bodies are JSON.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[0]",
   "note": "Every API call is signed with HMAC and SHA-256 or SHA-512. The signature is sent in the signature header and covers the checkout- headers plus the body.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.coverage",
   "note": "The reference documents creating a payment, reading it, and refunding it, plus provider and callback behavior. It is the payment API, not the whole Merchant panel. Coverage is partial.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.docs",
   "note": "Opened as the current Payment API reference markdown served by docs.paytrail.com.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.first_party",
   "note": "The Paytrail page says Paytrail MCP is available for payment API features through an MCP assistant, alongside the Merchant panel.",
   "source": "https://www.paytrail.com/en/agentic-commerce",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.verdict",
   "note": "Paytrail's own technical reference names list_merchants, create_payment, get_payment, and list_payment_providers, and documents OAuth 2.0 PKCE. The verdict is official.",
   "source": "https://mcp.paytrail.com/docs/tekninen-viite.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.verdict",
   "note": "The docs site HTML sets the site name to Paytrail MCP with a BETA tag.",
   "source": "https://mcp.paytrail.com/docs/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.data_access.export[0]",
   "note": "The create-payment response example is a JSON object with transactionId, href, and providers. Request bodies must be JSON.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "Opened a text/plain llms.txt index of Paytrail payment services, merchant tools, and documentation links.",
   "source": "https://www.paytrail.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.api",
   "note": "A documented payment API with HMAC, create, read, refund, and signed callbacks is practical. Merchant credentials and provider-specific refund limits keep the score at 7.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.mcp",
   "note": "The technical reference names four payment tools and OAuth 2.0 PKCE. That is a narrow official surface next to the Payment API. Score 5.",
   "source": "https://mcp.paytrail.com/docs/tekninen-viite.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Payment API reference, including HMAC and POST /payments.",
   "source": "https://docs.paytrail.com/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the Finnish MCP setup page, including the server URL and merchant-panel activation.",
   "source": "https://mcp.paytrail.com/docs/aloitus.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the Finnish MCP technical reference, including the four tools and the 14-day session.",
   "source": "https://mcp.paytrail.com/docs/tekninen-viite.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the English Paytrail MCP product page.",
   "source": "https://www.paytrail.com/en/agentic-commerce",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-16",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://docs.paytrail.com/README.md"
   },
   {
    "type": "mcp",
    "url": "https://mcp.paytrail.com/docs/aloitus.md"
   },
   {
    "type": "mcp",
    "url": "https://mcp.paytrail.com/docs/tekninen-viite.md"
   },
   {
    "type": "docs",
    "url": "https://www.paytrail.com/en/agentic-commerce"
   }
  ]
 },
 "homepage": "https://www.paytrail.com/en",
 "id": "paytrail",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": true
  },
  "api": {
   "auth": [
    "hmac"
   ],
   "coverage": "partial",
   "docs": "https://docs.paytrail.com/README.md",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Merchants use the Merchant panel in a browser. The documented machine paths are the Payment API and the hosted MCP server. This record is Paytrail, not Klarna, Stripe, or Adyen.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Paytrail",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "adyen",
   "klarna",
   "stripe"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Paytrail",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 7,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": 5,
   "overall": 7,
   "rpa": null
  },
  "search": {
   "description": "Paytrail signs Payment API calls with HMAC. The official MCP server is labeled beta and names four payment tools.",
   "title": "Paytrail is automatable through its payment API"
  },
  "summary": "Paytrail is automatable today through the Payment API at services.paytrail.com. The API reference says every call is signed with HMAC using SHA-256 or SHA-512. The signature header is built from the lowercase checkout- headers in alphabetical order, plus the JSON body. The merchant ID goes in checkout-account. The reference publishes test merchant ID and secret key values used to calculate the signature. POST /payments creates a payment and returns a JSON object with a transaction ID and payment providers. GET /payments/{transactionId} returns the payment. POST /payments/{transactionId}/refund refunds a payment. If the merchant sets callback URLs, Paytrail calls them with HTTP GET, and the merchant must check the signature. Paytrail also documents an official MCP server at https://mcp.paytrail.com/mcp with Streamable HTTP and OAuth 2.0 PKCE against AWS Cognito. The setup page says MCP access is turned on under Users in the merchant panel, and that the assistant does not see the merchant password. A session lasts 14 days from the latest request. The technical reference names list_merchants, create_payment, get_payment, and list_payment_providers. Amounts are integers in cents. The MCP docs site name in the page source includes a BETA tag. The English agentic-commerce page also describes creating many payments from an Excel file. That action is not named in the technical reference. Zapier, Make, Power Automate, and n8n were not opened. Computer-use viability is unassessed. The API scores 7. The MCP server scores 5 because the docs label it beta and the named tools are a narrow slice of the Payment API. The API is the best path because it documents refunds and signed callbacks that those four tools do not.\n"
 }
}