You definitely need some type of merchant account as you can't process the cards without one. You would need some type of script to use with the gateway, unless you plan on processing all of the orders manually. You also should have an SSL cert for security since PayPal provides the encryption for you on their site.