- Your own address - the relay runs in your Cloudflare account, on your own
workers.devaddress. - Only PayPal gets through - it accepts notifications only from PayPal’s IPN servers, and signs everything it passes on with a secret unique to your account.
- Free - it runs on Cloudflare’s free plan.
- Hands-off - Komerza deploys and updates it. You never touch any code.
Who needs the relay
Prerequisites
- A Cloudflare account. The free plan is enough - sign up if you don’t have one.
- Permission to approve apps on that account. If you’re a member of someone else’s Cloudflare account, ask its administrator.
Set up the relay
1
Open the IPN relay settings
In your dashboard, open Settings under Online Store, then go to PayPal and scroll to IPN relay.You’ll also find the same Cloudflare relay card in the Friends & Family setup (at the IPN step), and in Configure PayPal when you choose Links and Buttons.
The PayPal section only appears in Settings once PayPal Business or Friends & Family is set up.
2
Click Connect Cloudflare
On the Cloudflare relay card, click Connect Cloudflare. You’re taken to Cloudflare to approve Komerza.If you start from Configure PayPal or the Friends & Family settings, Komerza saves what you’ve entered there first, so nothing is lost when you leave for Cloudflare.
3
Approve Komerza on Cloudflare
Choose the Cloudflare account the relay should run in, then click Authorize.Komerza asks for:
- Workers Admin - to create the relay in your account and keep it up to date. Cloudflare only lets apps create a Worker with account-wide Workers access; Komerza only ever touches its own relay Worker, named
ipn-relay-followed by a short code. - Ongoing access - so Komerza can update or remove the relay later without asking you to approve it again.
4
Copy your relay URL
You’re brought back to Komerza, which deploys the relay and shows Your PayPal relay is live with its IPN URL.
- Using Friends & Family on IPN? Copy the URL and continue to the next step.
- Only using Links and Buttons? You’re done - Links and Buttons is back at checkout. Skip ahead to the last step to test it.
If your Cloudflare account has never used Workers, it has no
workers.dev address yet. Komerza creates one for you.5
Paste the URL into PayPal (Friends & Family only)
- Open PayPal’s IPN settings.
- Paste your relay URL into the Notification URL field.
- Select Receive IPN messages (Enabled).
- Click Save.
6
Test it
Make a $1 test payment on your store with the PayPal method you set up. Once the order is marked as paid, the relay card shows when the Last notification arrived.
Moving from the old address
If you set up PayPal IPN before the relay existed, PayPal still sends your notifications to the old Komerza address. Set up your relay, then replace the old Komerza address in PayPal’s IPN settings with your relay URL. Until you’ve set up the relay, Payment Methods shows a Move PayPal to your own relay notice with a Set up relay button. Using Links and Buttons? There’s nothing to replace in PayPal - Komerza sends your relay’s address with each payment - but Links and Buttons stays hidden from checkout until your relay is live.Relay status
The badge on the Cloudflare relay card tells you where things stand:
Below the badge, a live relay also shows its IPN URL, the Last notification it passed on, which of your PayPal setups use it, and when it was deployed.
Managing the relay
- Redeploy installs the relay again with the same URL and secret. Use it if notifications stop arriving.
- Disconnect removes the relay Worker from your Cloudflare account and ends Komerza’s access. Notifications sent to the relay after that are refused, so point PayPal somewhere else first - for example, switch Friends & Family to Email Forwarding. Links and Buttons is hidden from checkout again.
- You can also revoke Komerza’s access at any time from your Cloudflare profile, under Manage OAuth authorizations. The relay keeps working; click Reconnect in Komerza when you want to manage it again.
If Komerza can no longer reach your Cloudflare account when you disconnect, it tells you so. Delete the
ipn-relay- Worker yourself in Cloudflare under Workers & Pages.