Braintree integrations by platform

Sandbox run evidence

UAT-Ops ran the directory's canonical card flow against Braintree's sandbox on 2026-09-11: 7 passed, 1 expected rejection. Every request went to the real sandbox through the workbench's ordinary execution path. Keys, object ids, request and response bodies were removed before publication; the status word in the last column is the provider's own.

StepRequestHTTPLatencyResultProvider status
create customerPOST graphql200274 msPass
tokenize cardPOST graphql20069 msPass
vault cardPOST graphql2001005 msPass
authorizePOST graphql200739 msPass
capturePOST graphql200472 msPass
partial refundPOST graphql200147 msExpected rejection — not yet settled: Braintree refunds only settling or settled transactions, and the flow refunds seconds after capture
authorize for voidPOST graphql200842 msPass
voidPOST graphql200595 msPass

Platform pages

About Braintree

Braintree is PayPal's developer-facing payment gateway. A merchant opens an account, tokenizes card, PayPal, Venmo, Apple Pay, Google Pay or bank details on the client, and sends the resulting nonce to its own server, which calls Braintree to authorize, capture, refund or vault it. Merchants in the US, Canada, Europe, Australia and parts of APAC use it; Venmo and ACH are US-only, and SEPA Direct Debit is a limited pilot.

There are two server-side surfaces. The older one is a set of server SDKs (Java, .NET, Node.js, PHP, Python, Ruby) that wrap Braintree's original API. The newer one is a single GraphQL endpoint, authenticated with HTTP Basic over a public/private key pair, that requires a date-shaped Braintree-Version header on every call. Both share one merchant account and one vault.

For an integration tester the sandbox is the useful part. Sign-up is self-serve, sandbox data never touches production, and outcomes are driven by documented test cards, static nonces and amount ranges rather than by a real acquirer. Settlement can be forced on demand, which matters because Braintree only refunds transactions that are settled or settling; anything earlier must be voided. Webhooks are signed (bt_signature / bt_payload), can be generated locally from the SDK, and are retried for 3 hours in sandbox versus 24 in production.

Published US pricing is a flat per-transaction rate with custom and interchange-plus options for larger merchants.

What we checked

  • Braintree offers a self-serve sandbox account; the sign-up link is braintreepayments.com/sandbox, and the sandbox is not linked to production in any way.1
  • The testing reference lists sandbox card numbers per brand (Visa 4111111111111111, Mastercard 5555555555554444, Amex 378282246310005, Discover 6011000991300009, plus JCB, Maestro, Diners and UnionPay), decline cards, static nonces such as fake-valid-nonce, and amount ranges that force outcomes (0.01-1999.99 settles, 2000.00-2999.99 processor declined, 3000.00-3000.99 fails with code 3000).2
  • In sandbox the sandboxSettleTransaction GraphQL mutation moves a transaction from SUBMITTED_FOR_SETTLEMENT to SETTLED; it errors in production, where settlement runs on its normal schedule. Test nonces act as payment method IDs without being consumed.3
  • The GraphQL API is served at https://payments.sandbox.braintree-api.com/graphql (sandbox) and https://payments.braintree-api.com/graphql (production), authenticated with HTTP Basic using a Base64-encoded public_key:private_key pair, with application/json bodies.4
  • Every GraphQL request must carry a Braintree-Version header holding a date in YYYY-MM-DD format; the docs recommend the date on which the integration began.4
  • Server SDKs are published for Java, .NET, Node.js, PHP, Python and Ruby; the Node package installs with npm install braintree and is configured with Environment.Sandbox plus merchant ID, public key and private key.5
  • The braintree_node library on GitHub requires Node 10 or later and TLS 1.2 with HTTP/1.1 for all connections to the gateway.6
  • Webhooks arrive as an HTTPS POST carrying bt_signature and bt_payload form fields; the SDK parse method verifies the signature and raises an invalid-signature exception when it does not match. A webhook that takes over 30 seconds is retried hourly for up to 3 hours in sandbox or 24 hours in production until a 2xx is returned.7
  • Sandbox webhooks can be exercised with the SDK sample_notification helper, which builds a signed payload for a given kind and object ID, or with the Check URL link under Settings > API > Webhooks in the Control Panel.8
  • Braintree documents an Idempotency-Key HTTP header (UUIDv4 recommended) to prevent duplicate charges when an API response is lost; the documented mutation is the in-person requestChargeFromInStoreReader. GraphQL transaction mutations also accept a clientMutationId.9
  • Only transactions in settled or settling status can be refunded; a transaction that has not begun settlement must be voided instead. Single and multiple partial refunds are allowed as long as the refunded total stays within the original amount.10
  • Voids apply to Authorized or Submitted for Settlement transactions (Settlement Pending for some PayPal cases) and cancel before funds move; refunds return settled funds, and PayPal and Venmo refunds are limited to 180 days.11
  • The GraphQL API exposes voidTransaction for unsettled transactions, refundTransaction for SETTLED ones (with an optional smaller amount for a partial refund), and reverseTransaction, which picks whichever applies.12
  • Braintree Direct accepts cards, PayPal, Apple Pay, Google Pay, Venmo (US only) and ACH Direct Debit; production Control Panel login is at braintreegateway.com/login.13
  • Apple Pay and Google Pay are listed for most merchants in the US, Canada, Europe, Australia and APAC; Venmo is US only; ACH Direct Debit is available to most US merchants. Visa Click to Pay support ends 20 January 2026.14
  • Apple Pay is supported in-app through the iOS SDK and on the web in Safari through the JavaScript v3 SDK.15
  • Google Pay works in Android apps and on the web through the current Android and JavaScript SDKs; a Google merchant ID is required before going live.16
  • Venmo is available only to US-based business entities, via Android v5, iOS v6 and JavaScript v3 SDKs, and cannot run inside an iframe.17
  • PayPal is offered in four flows: one-time payment, vaulted payment, recurring payment and checkout-with-vault, using JavaScript v3, iOS and Android SDKs.18
  • ACH Direct Debit is US-only, requires a custom JavaScript v3 integration (not Drop-in), and supports network check, micro-transfers, independent check and instant verification.19
  • SEPA Direct Debit is in limited release for pilot merchants, covers EUR accounts in 17 EU states, and uses a PayPal-hosted mandate page; mandates can be one-time or recurring and vaulted.20
  • 3D Secure 2 is supported across Visa Secure, Mastercard Identity Check, Discover ProtectBuy and Amex SafeKey, and is the mechanism for PSD2 SCA when both acquirer and issuer are in regulated countries.21
  • Network tokens are enabled on request for eligible merchants in the US and select regions; Braintree enrolls vaulted cards automatically and manages token lifecycle, exposing is_network_tokenized and processed_with_network_token flags on transactions.22
  • The vaultPaymentMethod mutation converts a single-use payment method into a multi-use one stored in the vault, running verification first for payment types that support it.23
  • Recurring billing pairs Plans (frequency and amount) with Subscriptions bound to vaulted payment methods; statuses are Pending, Active, Past Due, Expired and Canceled, and the feature is incompatible with Braintree Marketplace.24
  • Accounts start in the home currency only; additional per-currency merchant accounts are requested and then selected per transaction by merchant account ID. Braintree cites support for more than 130 currencies across 44 countries.25
  • Level 2 and Level 3 data is available to US merchants with a Tax ID and EU/UK merchants with a VAT ID, for eligible Visa and Mastercard corporate and purchasing cards; Level 3 needs line-item, discount and shipping data on sale transactions.26
  • US published rates are 2.89% + 0.29 USD for cards and digital wallets, 3.49% + 0.49 USD for Venmo, 0.75% capped at 5.00 USD for standard ACH, 1.5% + 0.10 USD for same-day ACH, and 15.00 USD per chargeback, with 1% added for non-USD currency or non-US cards; custom and interchange-plus pricing is available to established businesses.27

Sources

  1. https://developer.paypal.com/braintree/articles/get-started/try-it-outofficial documentation · checked 2026-09-11
  2. https://developer.paypal.com/braintree/docs/reference/general/testingofficial documentation · checked 2026-09-11
  3. https://developer.paypal.com/braintree/graphql/guides/testing/official documentation · checked 2026-09-11
  4. https://developer.paypal.com/braintree/graphql/guides/making_api_calls/official documentation · checked 2026-09-11
  5. https://developer.paypal.com/braintree/docs/start/hello-server/nodeofficial documentation · checked 2026-09-11
  6. https://github.com/braintree/braintree_nodecode repository · checked 2026-09-11
  7. https://developer.paypal.com/braintree/docs/guides/webhooks/parse/node/official documentation · checked 2026-09-11
  8. https://developer.paypal.com/braintree/docs/guides/webhooks/testing-go-live/official documentation · checked 2026-09-11
  9. https://developer.paypal.com/braintree/in-person/guides/making-a-transactionofficial documentation · a claim here is implied by this source, not stated · checked 2026-09-11
  10. https://developer.paypal.com/braintree/docs/reference/request/transaction/refund/ruby/official documentation · checked 2026-09-11
  11. https://developer.paypal.com/braintree/articles/control-panel/transactions/refunds-voids-creditsofficial documentation · checked 2026-09-11
  12. https://developer.paypal.com/braintree/graphql/guides/transactions/official documentation · checked 2026-09-11
  13. https://developer.paypal.com/braintree/docs/start/overviewofficial documentation · checked 2026-09-11
  14. https://developer.paypal.com/braintree/articles/get-started/payment-methodsofficial documentation · checked 2026-09-11
  15. https://developer.paypal.com/braintree/docs/guides/apple-pay/overviewofficial documentation · checked 2026-09-11
  16. https://developer.paypal.com/braintree/docs/guides/google-pay/overviewofficial documentation · checked 2026-09-11
  17. https://developer.paypal.com/braintree/docs/guides/venmo/overviewofficial documentation · checked 2026-09-11
  18. https://developer.paypal.com/braintree/docs/guides/paypal/overviewofficial documentation · checked 2026-09-11
  19. https://developer.paypal.com/braintree/docs/guides/ach/overviewofficial documentation · checked 2026-09-11
  20. https://developer.paypal.com/braintree/docs/guides/sepa-direct-debit/overviewofficial documentation · checked 2026-09-11
  21. https://developer.paypal.com/braintree/docs/guides/3d-secure/overviewofficial documentation · checked 2026-09-11
  22. https://developer.paypal.com/braintree/docs/guides/network-tokens/getting-startedofficial documentation · checked 2026-09-11
  23. https://developer.paypal.com/braintree/graphql/guides/payment_methods/official documentation · checked 2026-09-11
  24. https://developer.paypal.com/braintree/docs/guides/recurring-billing/overviewofficial documentation · checked 2026-09-11
  25. https://developer.paypal.com/braintree/articles/get-started/currenciesofficial documentation · checked 2026-09-11
  26. https://developer.paypal.com/braintree/docs/reference/general/level-2-and-3-processing/overviewofficial documentation · checked 2026-09-11
  27. https://www.paypal.com/us/enterprise/paypal-braintree-feesvendor pricing page · checked 2026-09-11

Last verified 2026-09-11 · Reviewed by a person 2026-09-24

Integration capabilities, requirements, pricing, availability, and vendor policies may change over time. UAT-Ops documents information based on the authoritative sources and testing available at the time of review.

Where newer information, testing, or vendor documentation materially changes a published claim, UAT-Ops may revise the page to reflect the most current verified information. Readers should confirm time-sensitive requirements with the relevant vendor before making production or purchasing decisions.