UCP Checker
Report

The State of Agentic Commerce — October 2026

· 30 October 2026 · 15 min read

Last month we closed by asking who ships next, and whether Wix would finish what it started on the day of our September census. Both got answers. Wix's template now declares cart on every Wix store we can validate. Platforms from Prague (Shoptet) to Santiago (Jumpseller) to Hong Kong (Boutir) moved from a handful of stores each to hundreds.

October was also the month UCP stopped being only a spec story. Google launched Universal Cart with checkout powered by UCP, TikTok's Buy Direct requires a UCP integration, Shopify's Fall '26 Edition shipped UCP features by name, and Walmart published terms for AI shopping agents. Meta and Sierra launched a second open protocol, for personal agents. And the next UCP release now has a date.

This is the ninth monthly state-of-the-ecosystem report from UCP Checker. Here is what the data says as of October 30, 2026.

October in five lines

  • More than 19,000 stores in our census publish a valid UCP profile, with an average UCP Score of 89 (the numbers).
  • Shopify and Wix carry about 92% of verified stores, and four platforms outside the US (Jumpseller, Shoptet, Tray and Boutir) now each have over a hundred, all on the current release (the platform map).
  • Transports and location are spreading in practice: A2A and Embedded checkout run end to end on public test stores, and Boutir became the second platform to declare location (capability coverage).
  • The next release is December 10, and the councils settled feeds, list_price and returns on the way to it (the protocol).
  • UCP reached the earnings calls: Alphabet said it enables direct checkout for "hundreds of thousands of brands" (on the earnings calls).

Adoption

The numbers

From the live stats and platforms pages:

Measure October 30
Average UCP Score 89
Stores we could score in grade A about 88%
Stores publishing a valid UCP profile (the file at /.well-known/ucp that tells agents what a store supports) more than 19,000, in a census of about 25,000 domains
Valid profiles on v2026-08-25 about 64%; nearly all the rest on 2026-04-08
Catalog search · cart · order 99% · 98% · 58%
Stores declaring identity linking about 11,000
Stores declaring location search about 2,600, up from 3 in September
Named platforms with a verified store 16, up from 14

Point-in-time readings of our public pages on October 30, 2026. Census figures cover the stores we check, not the whole market.

What the score says

The UCP Score model is still v1.0.0, fixed on August 25, so the score moves only when stores declare something different.

Grade Share of stores we could score
A (85–100) 87.5%
B (70–84) 7.8%
C (50–69) 2.1%
D (30–49) 2.6%

The towers are still templates: within a platform, stores declare the same thing and score within a point or two of each other.

Last month's watch list

What we said to watch October's answer
Wix finishing cart, and whether order follows Cart: done on every valid Wix profile. Order: not yet, which is why order sits at 58% census-wide.
Wix on 2026-08-25 Not yet. Wix stores still declare 2026-04-08.
The first Commerce Cloud profile One. A single Salesforce Commerce Cloud storefront publishes a valid profile: checkout over REST, on 2026-04-08. The other 76 we check don't publish one yet.
A second identity provider Not yet. Every store on 2026-08-25 that names an external identity provider names Shop accounts. One custom storefront lists its own sign-in server, which is the store's own OAuth, not a shared provider.
A second production payment token A few, in single digits. Four live retail and ticketing sites now declare AP2 mandates or payment authentication on 2026-08-25, up from one. Most of the roughly 40 AP2 declarations come from one developer's paid API services for agents, not shops.
Shoptet's first valid profile Yes, on 2026-08-25, with catalog, cart, checkout and fulfillment over REST.
Lodging Booking leaving review Merged as a draft on September 24 (#780), not yet in a release. No hotel or booking site in our census publishes a lodging profile; the only ones are test hotels, including our own.
The Muse dispute Two retailers, two answers. Amazon is blocking outside agents, as TechCrunch reported. Walmart opened an Agent Gateway that names Muse among the assistants that can connect (below).

Platforms and capabilities

The platform map

In September we counted fourteen platforms with a verified store, most in single digits. In October several reached the hundreds:

Platform Home market Verified, about What the template declares
Shopify Global 10,950 The full shopping surface, identity linking, permalink, embedded checkout; location on about one store in five
Wix Global 6,700 Catalog, cart, checkout, fulfillment, discount; no order
Jumpseller Chile 450 Catalog and cart, over MCP, on 2026-08-25
Shoptet Czech Republic 335 Catalog, cart, checkout, fulfillment, over REST, on 2026-08-25
Tray Brazil 245 Catalog, over MCP, on 2026-08-25
Boutir Hong Kong · Taiwan 175 Catalog, cart, discount, location; checkout on most stores
BigCommerce US 65 Checkout, cart, order
Shopware Europe 38 Varies by store

The honest caveat: much of this growth is our census getting wider, not stores switching on. When we can recognise a platform, we find more of its stores, and on a template platform every store declares the same thing.

Salla and Zid, both from Saudi Arabia, publish profiles on several hundred stores each. Their profiles don't yet match the schema of the release they declare, 2026-04-08, so they show as publishing, not yet valid. On a template platform that is one fix, landing on every store at once.

Further down: WooCommerce has about 20 verified stores, Magento and Cafe24 a handful each, and VTEX, PrestaShop, Tiendanube and 1C-Bitrix one each. About 150 run a custom or headless stack.

Salesforce Commerce Cloud has its first, out of 77 storefronts we check. Salesforce put UCP at general availability for October (our write-up) and says Commerce Cloud customers will take TikTok Buy Direct checkouts from Q1 2027. The rest may connect to AI surfaces directly, so "no public profile" is the accurate description.

Capability coverage

Catalog search, catalog lookup, cart, checkout and fulfillment all sit between 96% and 99% of valid profiles. Order, identity linking and buyer consent sit at 57–60%: Shopify's template declares them, Wix's doesn't.

Location: about 2,600 stores, up from three in September. About one in five Shopify stores declares it, and since this month so does every Boutir store we check, the first platform other than Shopify. Location is UCP's first cross-vertical primitive: places, hours and stock, which lodging, food and local services build on. Our Location Validator tests a store's search and lookup answers.

Transports, by template:

Transport Verified stores, about Mostly
MCP 98% Every major template
Embedded checkout 11,000 Shopify
REST 7,500 Wix (nine in ten)
A2A 12 Individual stores

We walked through the two least familiar on public test stores: UCP over A2A and Embedded Checkout. UCP Playground, where we send agents to shop test stores, now runs all four transports (try a run).

The deep end is counted in tens: about 40 stores declare AP2 mandates, and payment terms, split payments, payment authentication and loyalty are each in single digits (capabilities page).

Platform events this month

Shopify opened checkout to browser agents on September 28 and told builders which route to use (what the two routes mean).

TikTok launched Buy Direct and a Shopping Assistant on October 5. TikTok's business blog says Buy Direct requires a UCP integration; its newsroom post doesn't mention UCP (our write-up).

Google opened a UCP integration hub in Merchant Center for US merchants: checkout buttons in AI Mode and Gemini, cart transfer, native checkout and identity linking (how to get your store in).

Google launched Universal Cart in the US on October 15. Its launch post describes "effortless checkout powered by the Universal Commerce Protocol (UCP)". Shoppers pay with Google Pay inside the cart for many stores, or move items to the store's own cart (our dated note).

Walmart published terms for AI shopping agents on October 21, with an invite-only Agent Gateway and per-agent profiles in customer accounts due in November. Agents must identify themselves, a person approves every checkout outside the gateway, and the deploying company can be held responsible (section by section).

Shopify's Fall '26 Edition (October 28) shipped three UCP pieces, per Shopify's Edition page: cart and checkout permalinks "that include products, customer details, discounts, and order attribution using the Universal Commerce Protocol /buy endpoint"; a UCP /ask endpoint that "answers questions about a store, grounded in facts published by the business"; and retail locations surfaced to agents "using the Universal Commerce Protocol". They map onto the spec's permalink, ask and location capabilities.

The protocol

The 10 December release

No new release this month; v2026-08-25 is still current. The next has a date: the Bulk Product Discovery working group's October 28 minutes call December 10, 2026 an "immovable" release date. Merged to main and waiting for it:

Change Merged What it does
ask (#538) Oct 7 dev.ucp.common.ask: a question in, a sourced answer out, no side effects (what review changed)
Media variants (#690) Sep 29 Image encodings, video, external players and 3D; backported to 2026-04-08 and 2026-08-25 on Oct 22 (the spec, a test store)
Return policy (#634) Oct 23 dev.ucp.shopping.policy.return: eligibility window, refunds, channels and typed fees (how it works)
Order webhook signing (#659) Oct 16 Breaking fix: webhook-id and webhook-timestamp now inside the signature
Cart-only checkout (#940) Oct 22 A checkout can be created from a cart_id alone
A revert (#968) Oct 19 Removes the explicit-buyer-action rule for permalink cart merges added Oct 7
Identity linking docs (#891 and others) October Clearer rules on authorization servers and discovery

Since October 26 only documentation and housekeeping have merged. Outside the repo, /.well-known/ucp entered IANA's registry of well-known URIs on October 26, as a provisional registration (what that means).

Council decisions (23 Oct)

At its October 23 meeting, the Shopping Tech Council:

  • heard the feeds working group align on feed discovery for December: a common feed primitive with shopping-specific records;
  • agreed TikTok's list_price request (#751) should be an optional field;
  • agreed to merge return policy, and that recommendations in catalog search should be an explicit extension;
  • leaned towards a smaller, pragmatic first step on accelerated identity linking;
  • began piloting a GitHub Projects workflow for its agenda.

Earlier in the month, the Payments Tech Council's October 15 meeting heard draft charters for buy now, pay later and tokenization, the latter aiming at autonomous agent purchases by the end of Q1 2027. At its October 16 meeting the Governing Council marked the B2B and Local Services charters as under review and sent Donations back to scope the problem.

Working groups

On October 28 the Bulk Product Discovery working group kept common variant attributes such as color and size, and a flat native-checkout flag, out of the core spec, in favour of existing options, metadata and platform extensions. Delta feeds move to a later phase so the group can sign off the base feed capability (#866) on its next call.

Personal Agent Protocol

On October 6, Meta and Sierra announced the Personal Agent Protocol, nicknamed Poppy. UCP describes what a business can sell and how an agent checks out. The Personal Agent Protocol describes how a person's own agent finds a company, signs the person in, and works with its APIs, website and agents. Payments are left for later.

Draft 0.1 was published on October 9 (our first read) and version 0.2 was frozen on October 24. Draft 0.3 is being written in the open and isn't published; its changelog lists breaking changes to sessions, sign-in and keys. The project publishes its own Company validator in the implementation kit in its repository. Our protocol coverage lives on PAP Checker.

Verticals

Four charters queued in October. Each is a proposal, not a spec:

  • B2B (#947): a procurement charter naming SAP, Zip, Procurify, ORO Labs, Vroozi and Lio as platforms and Amazon as a business (our write-up).
  • Local Services (#922): filed by Stripe, backed by Meta, Wix, Squarespace and others, with the Universal Services Protocol to merge into UCP, bookings first (our write-up).
  • Food (#897): the first food checkout capability, in review with requested changes. Until it merges, a food order runs on released shopping capabilities, as one pickup order on a test restaurant shows.
  • Donations (#924): sent back to scope the problem first.

Lodging, already a draft, drew its first implementer feedback. An engineer whose GitHub profile lists DERTOUR Group filed eight proposals on October 15, from traveller identity fields to SEPA direct debit. On October 25, Openbooking, a French corporate hotel-booking platform, asked how a business checks a traveller's entitlement to a negotiated rate (#991).

Amazon's Tech Council member also proposed a hosted business directory, a business identity capability and event webhooks (our write-up).

The industry

On the earnings calls

Two of the companies behind these protocols named them on their third-quarter calls. We quote only the published transcripts (Alphabet, Meta).

Alphabet, October 28. Philipp Schindler, Google's SVP and Chief Business Officer, in prepared remarks: "The Universal Commerce Protocol, UCP, is being rapidly adopted by retailers. Today, UCP enables direct checkout for hundreds of thousands of brands across Google, including Chewy, Nike, Tapestry, and many more. We are combining this with the Agent Payments Protocol as we build for the future of commerce." In the Q&A he called agentic experiences "clearly additive".

Google's count covers checkout across its own surfaces; our census counts public profiles at /.well-known/ucp. Both can be true at once.

Meta, October 21. Mark Zuckerberg said more than 10 million people in the US and Canada had set up Muse personal agents, and that shopping is Muse's most common use. Susan Li, the CFO, said she expects the market to "evolve away from agents attempting to navigate every digital experience like a human" towards "more permissioned, structured interactions", and named the Personal Agent Protocol as the standard Meta is developing with partners.

What to watch in November

  • Wix order, and Wix on 2026-08-25. Either would move a census-wide figure in a day.
  • Salla and Zid validating. One template fix each would add hundreds of stores to the map.
  • A second Commerce Cloud storefront. A Salesforce template turning on would look very different from one store.
  • Location's third platform. It would show whether location becomes part of the standard surface.
  • The B2B and Local Services decisions at the Governing Council.
  • The December 10 release, and the version split it starts.
  • Walmart's Agent Profiles reaching customer accounts, and which agents the gateway admits.
  • The next earnings calls. Shopify and Walmart report in November. The first company to report spend completed by agents, not stores enabled for them, would be a new kind of number.

Nine months in, the question has changed again. In September, a platform could change thousands of storefronts in a day. In October, the news came from outside the census: a cart that spans retailers, a social app that requires the protocol, a platform shipping UCP features by name, a retailer that wrote rules for agents, and UCP on an earnings call. The stores are increasingly ready. The rest of the year is about who sends agents to them, and on what terms.

We'll see you in November.


About UCP Checker

UCP Checker is the independent validation and observability layer for the Universal Commerce Protocol. We crawl, validate and grade every public UCP manifest we can find, run the merchant directory, the UCP Score, live adoption stats, the vertical guides and the authority-bound vendor map, and track the spec as it evolves so you don't have to — measured from two vantages (what a business declares, and what actually happens when an agent transacts), the same way for everyone, without picking winners.

Sources

Related coverage: The State of Agentic Commerce, September 2026 · UCP's Return Policy Extension · /.well-known/ucp Joins the IANA Registry · Walmart's Agentic Access Terms, Explained

What does a UCP agent find at your store?
Check it once and it gets its own status page.
Check a store

Keep reading

22 Sep 2026 The State of Agentic Commerce — September 2026 Report · 19 min 26 Aug 2026 The State of Agentic Commerce — August 2026 Report · 12 min 15 Jul 2026 The State of Agentic Commerce — July 2026 Report · 13 min