Tech Stack Guides

How to Tell If a Website Uses Braintree

Braintree (a PayPal company) powers card and PayPal payments for many businesses. Detect it via js.braintreegateway.com scripts, the braintree global, hosted-fields iframes and braintreegateway.com APIs.

StackOptic Research Team27 May 20267 min read
Detecting Braintree payments via js.braintreegateway.com and hosted-fields iframes

Braintree, a PayPal company, is a developer-grade payment gateway that lets a single integration accept both cards and PayPal. To tell whether a site uses it, the quickest answer is to open a checkout page and look for the SDK from js.braintreegateway.com and the global braintree object. This guide covers every reliable signal, the Hosted Fields architecture, and what a Braintree integration tells you about the business.

What is Braintree?

Braintree is a payment gateway founded in 2007 and acquired by PayPal in 2013. Its core appeal is a unified, developer-friendly integration that processes credit and debit cards, PayPal, Venmo (US), Apple Pay and Google Pay through one SDK and one merchant account — with strong support for recurring billing, marketplaces (split payments) and vaulting of payment methods. Because it predates and complements Stripe in the developer-payments space, Braintree is common in subscription services, marketplaces and mid-to-large ecommerce, particularly where offering PayPal alongside cards in a single flow is valuable.

For detection, the key context is the PayPal relationship: Braintree is frequently the engine that powers both the card fields and the PayPal button on the same checkout, so you will often see Braintree and PayPal signals together. Finding Braintree signals a genuine transacting business that made a deliberate, developer-led choice to unify card and wallet processing. Its client SDK leaves a consistent footprint on the braintreegateway.com and braintree-api.com domains.

How Braintree loads and processes payments

A Braintree integration loads its client SDK from https://js.braintreegateway.com/web/<version>/js/..., exposing the global braintree object with modules like braintree.client, braintree.hostedFields and braintree.paypalCheckout. The merchant obtains a client token from its server, initialises the client, and then renders payment UI. For cards, Hosted Fields renders the card number, expiry and CVV inside iframes served from assets.braintreegateway.com, keeping raw card data off the merchant page for PCI compliance.

During payment, the SDK tokenises the payment method by talking to api.braintreegateway.com and payments.braintree-api.com, and it sends telemetry to client-analytics.braintreegateway.com. When PayPal is offered through Braintree, you will additionally see PayPal assets and flows, because Braintree orchestrates the PayPal button via the same integration. Knowing this flow — the js.braintreegateway.com SDK, the braintree global, Hosted Fields iframes, and the braintreegateway.com/braintree-api.com API hosts — makes detection straightforward.

How to tell if a website uses Braintree

Confirm at least two of the following, on a checkout page.

1. Check the Network tab. Reload the checkout and filter for braintree. You will see the SDK load from js.braintreegateway.com and calls to api.braintreegateway.com, client-analytics.braintreegateway.com and payments.braintree-api.com. This is the most reliable method.

2. Use the console. Type braintree and press Enter. A returned object with modules like client and hostedFields confirms the SDK is loaded.

3. Inspect the card fields. Card inputs rendered inside iframes from assets.braintreegateway.com are characteristic of Hosted Fields.

4. Look for the PayPal pairing. A PayPal button accompanied by braintreegateway.com traffic indicates Braintree orchestrating PayPal — a common, telltale combination.

5. Watch for analytics calls. Requests to client-analytics.braintreegateway.com are a reliable corroborating signal that the Braintree SDK is active.

What the Braintree signals look like

<script src="https://js.braintreegateway.com/web/3.x/js/client.min.js"></script>
window.braintree = { client: {...}, hostedFields: {...}, paypalCheckout: {...}, … }
<iframe name="braintree-hosted-field-number" src="https://assets.braintreegateway.com/web/…/hosted-fields-frame.html"></iframe>
POST https://payments.braintree-api.com/graphql   (tokenisation)
POST https://client-analytics.braintreegateway.com/…   (telemetry)

The combination of the js.braintreegateway.com SDK, the global braintree object, and Hosted Fields iframes (or braintree-api.com calls) is conclusive.

Braintree versus other processors — avoiding false positives

Match the host to stay accurate. Braintree uses braintreegateway.com and braintree-api.com; Stripe uses js.stripe.com; Adyen uses checkoutshopper-*.adyen.com; standalone PayPal uses paypal.com/sdk/js. The important nuance is the PayPal relationship: because Braintree can render the PayPal button itself, a checkout showing PayPal may be running through Braintree rather than the standalone PayPal SDK — the presence of braintreegateway.com traffic disambiguates this. Conversely, a site can use the standalone PayPal SDK without Braintree, in which case you will see paypal.com/sdk/js but no braintreegateway.com. Always check which host the card and PayPal flows actually call.

How reliable is each Braintree signal?

The js.braintreegateway.com SDK and the global braintree object are definitive. Hosted Fields iframes from assets.braintreegateway.com are equally strong and characteristic. Calls to api.braintreegateway.com, payments.braintree-api.com and client-analytics.braintreegateway.com are conclusive. The PayPal-via-Braintree pairing is a strong contextual signal but should be confirmed with a braintreegateway.com host rather than assumed from the PayPal button alone. The weakest case is a landing page that loads Braintree only at checkout, so test the payment step. As a rule, the SDK host or a braintree-api.com call settles it.

What a Braintree integration reveals about a business

Finding Braintree signals a genuine, transacting business that made a developer-led choice to unify card and PayPal processing in one integration — frequently because it values offering PayPal prominently alongside cards, or needs recurring billing or marketplace split-payments. The profile skews toward subscription services, marketplaces, and mid-to-large ecommerce and digital businesses. Because Braintree is owned by PayPal, its presence also tells you the merchant is committed to the PayPal ecosystem. If you sell to online businesses — subscription tooling, marketplace infrastructure, fraud, accounting or payments-adjacent services — a Braintree integration marks a transacting, technically capable account. The specific modules in use (paypalCheckout, vaulting, marketplace features) further reveal the business model.

Braintree in a commerce stack

Braintree usually sits within a subscription or marketplace-oriented commerce stack. On a subscription business you will often find Braintree alongside a billing or subscription-management layer, a CRM, and product analytics. On a marketplace, Braintree's split-payment capability handles payouts to multiple parties, accompanied by the platform's own catalogue and orders system. Because Braintree unifies cards and PayPal, you typically will not find a separate standalone PayPal integration — the PayPal button is part of Braintree. For an auditor, the valuable details are which Braintree modules are present (Hosted Fields, PayPal Checkout, marketplace), whether recurring billing is implied, and what surrounds it (subscription tools, CRM, analytics); together these reveal how the business takes payments and what its model looks like.

A quick Braintree confirmation walkthrough

Open the site's checkout with developer tools on the Network panel and filter for braintree. Look for the SDK from js.braintreegateway.com and calls to api.braintreegateway.com or payments.braintree-api.com. Switch to the Console and type braintree to confirm the object and its modules. Inspect the card fields for assets.braintreegateway.com Hosted Fields iframes. If a PayPal button is present, confirm whether it is driven by Braintree (via braintreegateway.com traffic) or the standalone PayPal SDK. Two signals confirm Braintree and clarify how it handles PayPal.

A quick Braintree detection checklist

  • On the checkout, filter the Network tab for braintree; the js.braintreegateway.com SDK is conclusive.
  • Type braintree in the console to confirm the object and its modules.
  • Inspect card fields for assets.braintreegateway.com Hosted Fields iframes.
  • Look for api.braintreegateway.com / payments.braintree-api.com calls.
  • Check whether the PayPal button runs through Braintree rather than the standalone SDK.
  • Note modules like paypalCheckout or marketplace features to infer the model.

Cards and PayPal in one: what Braintree implies

The defining thing a Braintree detection tells you is that the merchant deliberately chose to unify card and PayPal processing in a single integration rather than bolting PayPal on separately. That is a considered, developer-led decision, and it usually reflects one of a few motivations worth recognising. A business that wants PayPal prominent alongside cards — common in consumer ecommerce where PayPal lifts conversion — gets both through one SDK and one reconciliation. A subscription business gets Braintree's vaulting and recurring-billing features for storing and re-charging payment methods. A marketplace gets split payments to pay out multiple sellers. Each motivation points to a different, identifiable business model.

There is also a strategic read in the PayPal relationship itself. Choosing Braintree (a PayPal company) over, say, Stripe signals a commitment to the PayPal ecosystem and often a priority on the PayPal/Venmo wallet experience. So when you find Braintree, do not record it as just another gateway: note which modules are in play — Hosted Fields for cards, paypalCheckout for the wallet, vaulting for subscriptions, marketplace features for payouts — because together they reveal whether you are looking at a straightforward store, a subscription service or a platform. For sellers of subscription tooling, marketplace infrastructure, fraud or accounting services, that model-level read is precisely what turns a Braintree detection into a qualified, well-understood prospect rather than a bare data point.

Detecting Braintree at scale

Checking one site is quick, but finding every Braintree merchant across a list — to prospect subscription and marketplace businesses — calls for automation. StackOptic detects Braintree and thousands of other technologies from a real browser, and can distinguish Braintree-orchestrated PayPal from the standalone PayPal SDK. For related reading, see our guide to finding out what payment processor a website uses and the full Braintree technology profile.

Frequently asked questions

What is the fastest way to detect Braintree?

On a checkout page, open the Network tab and filter for 'braintree'. You will see the SDK load from js.braintreegateway.com and calls to api.braintreegateway.com and client-analytics.braintreegateway.com. The SDK script plus the global braintree object is the definitive signal.

What are Braintree Hosted Fields?

Hosted Fields is Braintree's PCI-compliant card-input feature: it renders the card number, expiry and CVV inside iframes served from assets.braintreegateway.com, so the merchant page never touches raw card data. Finding braintreegateway.com iframes around the card fields is a strong Braintree signal.

How is Braintree related to PayPal?

Braintree is owned by PayPal, and it is designed to process both cards and PayPal through one integration. So a site using Braintree often shows a PayPal button powered by Braintree alongside card fields. Seeing both braintreegateway.com and PayPal assets together is a common, characteristic pattern.

Where does Braintree send data?

Braintree's client SDK communicates with api.braintreegateway.com and payments.braintree-api.com for tokenisation and processing, and sends telemetry to client-analytics.braintreegateway.com. Requests to these braintreegateway.com / braintree-api.com hosts confirm a live Braintree integration.

What does it mean if a site uses Braintree?

Braintree signals a business that wanted a single, developer-grade integration to accept both cards and PayPal, often with recurring billing or marketplace features. It is common in subscription services, marketplaces and mid-to-large ecommerce, indicating a genuine transacting business with a technical integration.

Analyse any website with StackOptic

Get the full technology stack, performance, security and SEO report in seconds — free.

Analyse a website

Related articles