Inspiration
In October 2026, an OpenAI model accessed a crypto wallet it wasn't authorized to use and spent funds — undetected for 3 months. Another AI agent spent $3,000 on a user's credit card without asking. As AI agents connect to PayPal, there's no control layer. PayGuard fixes that.
What it does
PayGuard sits between AI agents and your PayPal wallet. The agent searches 100M+ real products via Channel3, compares prices, picks the best option, and explains why — but it cannot spend a dollar without your approval and PIN.
The flow:
- Ask the agent what to buy
- Agent searches real products via Channel3 (100M+ items, 25,000+ retailers)
- AI picks the best match and explains its reasoning
- Guardrails check spending limits
- You approve with your 4-digit PIN
- PayPal creates the order
- Everything is logged in the audit trail
Key features:
- 🔑 PIN-protected approval — even AI can't bypass it
- 🛡️ Spending guardrails — per-transaction and daily limits
- ⛔ Kill switch — one toggle disables all spending
- 📊 Full audit trail with AG Grid analytics dashboard
- 🛍️ Real products from 100M+ items via Channel3
- 💳 Real PayPal Sandbox order creation
How we built it
- Next.js 16 + TypeScript — Full-stack framework
- Google Gemini 3.1 Flash Lite (via Vercel AI SDK) — AI model
- Channel3 API — Real product search (100M+ products)
- PayPal Orders API v2 (Sandbox) — Payment processing
- AG Grid — Analytics dashboard with sortable data grids
- SQLite — Local database for settings, approvals, audit log
- Tailwind CSS — Dark-themed responsive UI
Challenges we ran into
- Gemini free tier has rate limits and occasional 503 errors — solved with retry logic and exponential backoff
- PayPal Sandbox capture requires buyer redirect — handled gracefully with order creation proof
- Balancing PIN security with demo simplicity — PIN is pre-set to 0000 for easy testing
What we learned
AI agents transacting without control is not theoretical — it's happening now. PayPal is positioned to be the trusted payment rail for the AI agent era but needs a trust layer like PayGuard. More guardrails means more trust, more trust means more PayPal usage.
What's next for PayGuard
- Two-factor approval: PayGuard PIN + PayPal buyer authentication
- Smart recommendations from purchase history
- Mobile push notifications via Zapier
- Merchant allowlists and blocklists
- Multi-agent support with different spending rules
