Universal Commerce Protocol (UCP)

An open-source, vendor-agnostic standard for agentic commerce, announced by Google CEO Sundar Pichai at NRF on January 11, 2026. UCP defines a common language enabling AI agents, platforms, and merchants to transact across the full commerce lifecycle — from product discovery and cart through checkout and post-purchase order management — without custom one-off integrations. Licensed Apache 2.0 and governed via GitHub.

---

Why it exists

Before UCP, every retailer needed bespoke integrations for every AI surface or agent — an "N×N integration bottleneck." UCP replaces this with a single integration point: a JSON manifest at a well-known endpoint that any UCP-compatible agent can discover and negotiate with. (Google Developers Blog, 2026-01-11)

---

Governance and partners (as-of 2026-09-11)

Launch (January 11, 2026): Announced at NRF, co-developed with Shopify, Etsy, Wayfair, Target, and Walmart. 20+ endorsing partners at launch including Adyen, American Express, Best Buy, Flipkart, Macy's, Mastercard, Stripe, The Home Depot, Visa, and Zalando. (blog.google, 2026-01-11)

April 2026 Tech Council expansion: Amazon, Meta, Microsoft, Salesforce, and Stripe joined a UCP Tech Council. Amazon's participation reversed its earlier stance of blocking external AI agents from its ecosystem (Amazon had blocked OpenAI, Anthropic, Meta, Google, and Huawei bots in August 2025). (theroberthu.com, approx. April 2026)

Official resources:

• Spec site: ucp.dev
• Open-source repo: github.com/Universal-Commerce-Protocol/ucp
• Google developer guide: developers.google.com/merchant/ucp/guides (last updated 2026-06-16)

---

Technical architecture

Well-known endpoint: Merchants publish a JSON capability manifest at /.well-known/ucp on their domain. Google reads this file to negotiate which spec version and capabilities to use. No central UCP server — discovery works via DNS, analogous to email federation.

Spec versions (as-of 2026-05-28):

• v2026-01-23 — initial launch version (checkout, fulfilment, discount, order)
• v2026-04-08 — adds identity linking capability to the profile schema

UCP Profile declares:

• Protocol version and supported spec URLs
• REST endpoint ^[1]
• Capabilities supported
• Payment handler configuration (currently com.google.pay)
• EC P-256 signing public keys (JWK format) for webhook signature verification

Core REST endpoints a merchant must implement:

1. Session creation
2. Session update
3. Session completion (checkout complete)
4. Order status webhooks (push to Google)

Payment trust model: The platform (Google) must NOT touch raw financial credentials. Payment credentials flow directly between the buyer's wallet and merchant via the payment handler.

Transport flexibility: UCP supports REST, Model Context Protocol (MCP), and Agent2Agent (A2A) simultaneously — retailers choose whichever fits their existing infrastructure. (developers.google.com, 2026-05-28)

---

Capabilities (as-of 2026-09-11)

Capability	What it does	Status
Checkout (native)	3-endpoint REST session model; buy button on Search / AI Mode / Gemini	Live in US; expanding to Canada, Australia, UK
Cart API	Agents add multiple items from one store to a persistent cart in one flow	Available (March 2026)
Catalog	Agents retrieve real-time product data (variants, inventory, pricing) from merchant feed	Available (March 2026)
Identity Linking	OAuth 2.0 account link carries loyalty/member benefits across platforms	Available (March 2026)
Order lifecycle	Merchant pushes order status updates to Google via webhooks	Live
Lodging	Full booking flow with real-time rates, availability, guest registration	Spec in draft (developers.google.com/hotels/ucp)
Food delivery	Conversational ordering with customisation, tipping, delivery instructions	Spec in draft; partners: DoorDash, Uber Eats, Square, Toast

(blog.google, 2026-03-19; ucp.dev)

Two checkout paths exist: (1) a native checkout where the AI surface handles the UI, and (2) an embedded guest checkout letting the retailer maintain their custom checkout experience via iframe.

---

Timeline

Date	Event
2026-01-11	Announced at NRF by Sundar Pichai; launch partners confirmed
2026-01-12	Business Agent (Google) launched alongside UCP
2026-03-19	Update: Cart, Catalog, Identity Linking added; simplified Merchant Center onboarding
2026-04-24	Amazon, Meta, Microsoft, Salesforce, Stripe join UCP Tech Council
2026-05-19	Google I/O: Universal Cart (Google) announced; lodging + food verticals; UCP coming to YouTube US; Canada/Australia expansion confirmed
2026-06-16	Developer guide last updated on developers.google.com

---

Relationship to Google's commerce ecosystem

Shopping Graph: Google's Shopping Graph contains 50+ billion product listings, with 2+ billion refreshed hourly. UCP layers transactional capability on top of this existing product data infrastructure. Merchant Center is the on-ramp: products must be flagged via a native_commerce attribute to participate in UCP-powered checkout. (semrush.com, 2026-03-26)

Universal Cart (Google): A persistent, cross-surface cart (Search, Gemini, YouTube, Gmail) announced at Google I/O (May 19, 2026). It tracks price drops, deal alerts, price history, and back-in-stock alerts. It is powered by UCP. Live with Nike, Sephora, Target, Ulta Beauty, Walmart, Wayfair, and Shopify merchants (Fenty, Steve Madden) as of summer 2026 (as-of 2026-05-19). Merchant of record remains the retailer in all flows. (blog.google, 2026-05-19)

Business Agent (Google): A branded conversational AI agent on Google Search, launched January 12, 2026. Retailers activate and customise it via Merchant Center. Planned expansions include training on retailer-supplied data, customer insights, related-product offers, and direct agentic checkout within the agent. (blog.google, 2026-01-11)

AI Mode (Google) / Gemini: UCP powers in-context checkout within AI Mode in Search and the Gemini app. Google Pay is the initial payment handler; PayPal support confirmed but not yet live at original launch.

Schema.org / Structured Data: UCP does not replace Schema.org markup — it builds on it. Schema.org Product markup on PDPs remains a prerequisite for Merchant Center eligibility and agentic discovery. Google is adding new Merchant Center data attributes specifically for conversational commerce (product Q&A answers, compatible accessories, substitutes), rolling out from mid-2026.

AP2 (Agent Payments Protocol): A separate but complementary protocol enabling agents to make autonomous purchases within user-defined guardrails via cryptographically signed Mandate contracts. v0.2.0 (April 2026) added "Human Not Present" payments. UCP is compatible with AP2. (ap2-protocol.org)

---

Retailer onboarding path (as-of 2026-06-16)

1. Configure Merchant Center account (shipping, returns, product feed)
2. Join waitlist: support.google.com/merchants/contact/ucp_integration_interest — integration requires Google approval before going live
3. Set up Google Pay payment handler
4. Publish UCP profile at /.well-known/ucp
5. Implement 3 core REST checkout endpoints
6. Choose guest checkout (default) or account-linked checkout (OAuth 2.0)
7. Implement order status webhooks

A no-code pilot integration path via Merchant Center UI is also rolling out (as-of mid-2026). (developers.google.com, 2026-06-16)

---

Competitive context

OpenAI/Stripe's ACP (Agentic Commerce Protocol) launched September 2025 as the main competing standard. Adobe Commerce and others have committed to supporting both protocols. YouTube content (Retailgentic channel, Jan 11, 2026) described "battle lines forming" between ACP and UCP at the moment of the NRF announcement. (Retailgentic YouTube, 2026-01-11)

---

Industry concerns and criticism

1. Power concentration

The "open" framing obscures that Google has spent years building the infrastructure (Shopping Graph: 50B+ listings, refreshed 2B/hour) that UCP gives everyone else access to on Google's terms. The openness is access to a system already controlled by one actor. (RETAILBOSS Substack, 2026-01-12; Merkle, 2026-03-09)

2. The attribution blind spot

UCP transactions generate zero pageviews, sessions, or events on a retailer's site. Existing analytics models break before replacement models exist. As of early 2026, Google has not yet shipped dedicated UCP conversion reporting in Merchant Center — a concrete near-term operational risk flagged across r/DigitalMarketing and practitioner blogs. (SureBright, 2026-01-22)

3. Prisoner's Dilemma dynamics

Merchants must choose between joining UCP (gain AI-surface visibility, lose brand touchpoint and customer data depth) or opting out (preserve experience, risk invisibility as competitors participate). No neutral middle position once the ecosystem tips. (Searchable.com, 2026-02-07)

4. Brand erosion from storefront bypass

When checkout happens inside an AI interface, the merchant's storefront is bypassed. Noted in r/SEO: "This is great for revenue but probably not so great for long term branding for a store." (Reddit, r/SEO, approx. January 2026, via SureBright)

5. Consumer trust gap

"I don't even trust myself to shop drunk" — r/AI_Agents (approx. January 2026). Consumer willingness to delegate payment to AI agents remains the primary adoption barrier identified across practitioner communities. (Via SureBright)

6. Google's strategic monetisation layer

Multiple analysts argue the protocol itself is deliberately non-monetary; monetisation comes one layer above in advertising within AI surfaces once intent signals flow through Google's infrastructure. The move from influencing commerce to owning the conversion layer is the actual strategic objective. (Forbes / Joe Toscano, 2026-01-22)

7. EU regulatory friction

EU regulatory frameworks, SCA under PSD2, and GDPR consent requirements mean the frictionless agentic checkout of US demos cannot be reproduced at scale in Europe. The EU fined Google €890M under the Digital Markets Act in July 2026. Merkle argues explicitly that for most European merchants, restraint is strategically correct in 2026. (Merkle, 2026-03-09; EU DMA enforcement, 2026-07-23)

8. Segment analysis (Merkle framework)

Merkle's 5-segment analysis (Mar 9, 2026): mass/price-driven retail (Zalando, Walmart) benefits immediately; curated/specialty retailers get limited upside but can't afford to opt out; D2C configuration-led brands (Canyon Bikes, Victorinox) find UCP irrelevant to their core conversion moment; luxury and B2B are structurally incompatible with agentic checkout. (Merkle, 2026-03-09)

---

What practitioners report (Reddit, January 2026)

• r/AI_Agents: Deep skepticism citing Google's hype cycle history (Google+, etc.); trust gap around AI-mediated payment as primary friction
• r/shopify: Announcement fatigue; comparison to unfulfilled OpenAI AI commerce rollouts
• r/SEO: John Mueller explicitly said UCP is not a ranking signal (via Bluesky, cited by SureBright) — dampened loudest SEO doomsday takes
• r/DigitalMarketing: Practitioners focusing on clean product data as the immediate practical task regardless of UCP participation; Merchant Center warnings on incomplete structured data fields appearing early

---

Market projections

• Morgan Stanley projects agentic shoppers at $190B–$385B in US e-commerce by 2030 (10–20% market share) (as-of 2026, [YouTube / Retailgentic summary](https://www.youtube.com/watch?v=sB4mviioui0))
• McKinsey/QuantumBlack projects agentic commerce will orchestrate $3–5 trillion in global retail spend by 2030, $1T US B2C alone (as-of October 2025, [McKinsey at NRF 2026](https://www.mckinsey.com/capabilities/growth-marketing-and-sales/how-we-help-clients/national-retail-federation))
• Adobe data: AI-sourced traffic was 49% less likely to convert in January 2025, improving to 23% less likely by July 2025 — gap is closing but agentic commerce is not yet the dominant channel (as-of July 2025, via [SureBright](https://www.surebright.com/blog/dont-opt-for-universal-commerce-protocol-just-yet-explaining-googles-new-ai-shopping-update))
• Forrester (Q2 2026): "Hype outpaces real adoption; most 'agentic' experiences are assistive not autonomous." William McKeon-White called UCP "focused on helping agents interact with retailers." (Forrester State of Agentic Commerce webinar, Q2 2026)
• Gartner Hype Cycle for Digital Commerce 2026 (June 2, 2026): profiles "AI Agents for Commerce Operations" as a named technology, states "agentic commerce takes centre stage... no longer optional but essential." (via KIBO Commerce, 2026-06-02)

References

1. e.g. ` — business.example.com/ucp/v1`