Last month we closed by asking who ships next, and whether Wix would finish what it started on the day of our September census. Both got answers. Wix's template now declares cart on every Wix store we can validate. Platforms from Prague (Shoptet) to Santiago (Jumpseller) to Hong Kong (Boutir) moved from a handful of stores each to hundreds.
October was also the month UCP stopped being only a spec story. Google launched Universal Cart with checkout powered by UCP, TikTok's Buy Direct requires a UCP integration, Shopify's Fall '26 Edition shipped UCP features by name, and Walmart published terms for AI shopping agents. Meta and Sierra launched a second open protocol, for personal agents. And the next UCP release now has a date.
This is the ninth monthly state-of-the-ecosystem report from UCP Checker. Here is what the data says as of October 30, 2026.
October in five lines
- More than 19,000 stores in our census publish a valid UCP profile, with an average UCP Score of 89 (the numbers).
- Shopify and Wix carry about 92% of verified stores, and four platforms outside the US (Jumpseller, Shoptet, Tray and Boutir) now each have over a hundred, all on the current release (the platform map).
- Transports and location are spreading in practice: A2A and Embedded checkout run end to end on public test stores, and Boutir became the second platform to declare location (capability coverage).
- The next release is December 10, and the councils settled feeds,
list_priceand returns on the way to it (the protocol). - UCP reached the earnings calls: Alphabet said it enables direct checkout for "hundreds of thousands of brands" (on the earnings calls).
Adoption
The numbers
From the live stats and platforms pages:
| Measure | October 30 |
|---|---|
| Average UCP Score | 89 |
| Stores we could score in grade A | about 88% |
Stores publishing a valid UCP profile (the file at /.well-known/ucp that tells agents what a store supports) |
more than 19,000, in a census of about 25,000 domains |
| Valid profiles on v2026-08-25 | about 64%; nearly all the rest on 2026-04-08 |
| Catalog search · cart · order | 99% · 98% · 58% |
| Stores declaring identity linking | about 11,000 |
| Stores declaring location search | about 2,600, up from 3 in September |
| Named platforms with a verified store | 16, up from 14 |
Point-in-time readings of our public pages on October 30, 2026. Census figures cover the stores we check, not the whole market.
What the score says
The UCP Score model is still v1.0.0, fixed on August 25, so the score moves only when stores declare something different.
| Grade | Share of stores we could score |
|---|---|
| A (85–100) | 87.5% |
| B (70–84) | 7.8% |
| C (50–69) | 2.1% |
| D (30–49) | 2.6% |
The towers are still templates: within a platform, stores declare the same thing and score within a point or two of each other.
Last month's watch list
| What we said to watch | October's answer |
|---|---|
| Wix finishing cart, and whether order follows | Cart: done on every valid Wix profile. Order: not yet, which is why order sits at 58% census-wide. |
| Wix on 2026-08-25 | Not yet. Wix stores still declare 2026-04-08. |
| The first Commerce Cloud profile | One. A single Salesforce Commerce Cloud storefront publishes a valid profile: checkout over REST, on 2026-04-08. The other 76 we check don't publish one yet. |
| A second identity provider | Not yet. Every store on 2026-08-25 that names an external identity provider names Shop accounts. One custom storefront lists its own sign-in server, which is the store's own OAuth, not a shared provider. |
| A second production payment token | A few, in single digits. Four live retail and ticketing sites now declare AP2 mandates or payment authentication on 2026-08-25, up from one. Most of the roughly 40 AP2 declarations come from one developer's paid API services for agents, not shops. |
| Shoptet's first valid profile | Yes, on 2026-08-25, with catalog, cart, checkout and fulfillment over REST. |
| Lodging Booking leaving review | Merged as a draft on September 24 (#780), not yet in a release. No hotel or booking site in our census publishes a lodging profile; the only ones are test hotels, including our own. |
| The Muse dispute | Two retailers, two answers. Amazon is blocking outside agents, as TechCrunch reported. Walmart opened an Agent Gateway that names Muse among the assistants that can connect (below). |
Platforms and capabilities
The platform map
In September we counted fourteen platforms with a verified store, most in single digits. In October several reached the hundreds:
| Platform | Home market | Verified, about | What the template declares |
|---|---|---|---|
| Shopify | Global | 10,950 | The full shopping surface, identity linking, permalink, embedded checkout; location on about one store in five |
| Wix | Global | 6,700 | Catalog, cart, checkout, fulfillment, discount; no order |
| Jumpseller | Chile | 450 | Catalog and cart, over MCP, on 2026-08-25 |
| Shoptet | Czech Republic | 335 | Catalog, cart, checkout, fulfillment, over REST, on 2026-08-25 |
| Tray | Brazil | 245 | Catalog, over MCP, on 2026-08-25 |
| Boutir | Hong Kong · Taiwan | 175 | Catalog, cart, discount, location; checkout on most stores |
| BigCommerce | US | 65 | Checkout, cart, order |
| Shopware | Europe | 38 | Varies by store |
The honest caveat: much of this growth is our census getting wider, not stores switching on. When we can recognise a platform, we find more of its stores, and on a template platform every store declares the same thing.
Salla and Zid, both from Saudi Arabia, publish profiles on several hundred stores each. Their profiles don't yet match the schema of the release they declare, 2026-04-08, so they show as publishing, not yet valid. On a template platform that is one fix, landing on every store at once.
Further down: WooCommerce has about 20 verified stores, Magento and Cafe24 a handful each, and VTEX, PrestaShop, Tiendanube and 1C-Bitrix one each. About 150 run a custom or headless stack.
Salesforce Commerce Cloud has its first, out of 77 storefronts we check. Salesforce put UCP at general availability for October (our write-up) and says Commerce Cloud customers will take TikTok Buy Direct checkouts from Q1 2027. The rest may connect to AI surfaces directly, so "no public profile" is the accurate description.
Capability coverage
Catalog search, catalog lookup, cart, checkout and fulfillment all sit between 96% and 99% of valid profiles. Order, identity linking and buyer consent sit at 57–60%: Shopify's template declares them, Wix's doesn't.
Location: about 2,600 stores, up from three in September. About one in five Shopify stores declares it, and since this month so does every Boutir store we check, the first platform other than Shopify. Location is UCP's first cross-vertical primitive: places, hours and stock, which lodging, food and local services build on. Our Location Validator tests a store's search and lookup answers.
Transports, by template:
| Transport | Verified stores, about | Mostly |
|---|---|---|
| MCP | 98% | Every major template |
| Embedded checkout | 11,000 | Shopify |
| REST | 7,500 | Wix (nine in ten) |
| A2A | 12 | Individual stores |
We walked through the two least familiar on public test stores: UCP over A2A and Embedded Checkout. UCP Playground, where we send agents to shop test stores, now runs all four transports (try a run).
The deep end is counted in tens: about 40 stores declare AP2 mandates, and payment terms, split payments, payment authentication and loyalty are each in single digits (capabilities page).
Platform events this month
Shopify opened checkout to browser agents on September 28 and told builders which route to use (what the two routes mean).
TikTok launched Buy Direct and a Shopping Assistant on October 5. TikTok's business blog says Buy Direct requires a UCP integration; its newsroom post doesn't mention UCP (our write-up).
Google opened a UCP integration hub in Merchant Center for US merchants: checkout buttons in AI Mode and Gemini, cart transfer, native checkout and identity linking (how to get your store in).
Google launched Universal Cart in the US on October 15. Its launch post describes "effortless checkout powered by the Universal Commerce Protocol (UCP)". Shoppers pay with Google Pay inside the cart for many stores, or move items to the store's own cart (our dated note).
Walmart published terms for AI shopping agents on October 21, with an invite-only Agent Gateway and per-agent profiles in customer accounts due in November. Agents must identify themselves, a person approves every checkout outside the gateway, and the deploying company can be held responsible (section by section).
Shopify's Fall '26 Edition (October 28) shipped three UCP pieces, per Shopify's Edition page: cart and checkout permalinks "that include products, customer details, discounts, and order attribution using the Universal Commerce Protocol /buy endpoint"; a UCP /ask endpoint that "answers questions about a store, grounded in facts published by the business"; and retail locations surfaced to agents "using the Universal Commerce Protocol". They map onto the spec's permalink, ask and location capabilities.
The protocol
The 10 December release
No new release this month; v2026-08-25 is still current. The next has a date: the Bulk Product Discovery working group's October 28 minutes call December 10, 2026 an "immovable" release date. Merged to main and waiting for it:
| Change | Merged | What it does |
|---|---|---|
ask (#538) |
Oct 7 | dev.ucp.common.ask: a question in, a sourced answer out, no side effects (what review changed) |
| Media variants (#690) | Sep 29 | Image encodings, video, external players and 3D; backported to 2026-04-08 and 2026-08-25 on Oct 22 (the spec, a test store) |
| Return policy (#634) | Oct 23 | dev.ucp.shopping.policy.return: eligibility window, refunds, channels and typed fees (how it works) |
| Order webhook signing (#659) | Oct 16 | Breaking fix: webhook-id and webhook-timestamp now inside the signature |
| Cart-only checkout (#940) | Oct 22 | A checkout can be created from a cart_id alone |
| A revert (#968) | Oct 19 | Removes the explicit-buyer-action rule for permalink cart merges added Oct 7 |
| Identity linking docs (#891 and others) | October | Clearer rules on authorization servers and discovery |
Since October 26 only documentation and housekeeping have merged. Outside the repo, /.well-known/ucp entered IANA's registry of well-known URIs on October 26, as a provisional registration (what that means).
Council decisions (23 Oct)
At its October 23 meeting, the Shopping Tech Council:
- heard the feeds working group align on feed discovery for December: a common feed primitive with shopping-specific records;
- agreed TikTok's
list_pricerequest (#751) should be an optional field; - agreed to merge return policy, and that recommendations in catalog search should be an explicit extension;
- leaned towards a smaller, pragmatic first step on accelerated identity linking;
- began piloting a GitHub Projects workflow for its agenda.
Earlier in the month, the Payments Tech Council's October 15 meeting heard draft charters for buy now, pay later and tokenization, the latter aiming at autonomous agent purchases by the end of Q1 2027. At its October 16 meeting the Governing Council marked the B2B and Local Services charters as under review and sent Donations back to scope the problem.
Working groups
On October 28 the Bulk Product Discovery working group kept common variant attributes such as color and size, and a flat native-checkout flag, out of the core spec, in favour of existing options, metadata and platform extensions. Delta feeds move to a later phase so the group can sign off the base feed capability (#866) on its next call.
Personal Agent Protocol
On October 6, Meta and Sierra announced the Personal Agent Protocol, nicknamed Poppy. UCP describes what a business can sell and how an agent checks out. The Personal Agent Protocol describes how a person's own agent finds a company, signs the person in, and works with its APIs, website and agents. Payments are left for later.
Draft 0.1 was published on October 9 (our first read) and version 0.2 was frozen on October 24. Draft 0.3 is being written in the open and isn't published; its changelog lists breaking changes to sessions, sign-in and keys. The project publishes its own Company validator in the implementation kit in its repository. Our protocol coverage lives on PAP Checker.
Verticals
Four charters queued in October. Each is a proposal, not a spec:
- B2B (#947): a procurement charter naming SAP, Zip, Procurify, ORO Labs, Vroozi and Lio as platforms and Amazon as a business (our write-up).
- Local Services (#922): filed by Stripe, backed by Meta, Wix, Squarespace and others, with the Universal Services Protocol to merge into UCP, bookings first (our write-up).
- Food (#897): the first food checkout capability, in review with requested changes. Until it merges, a food order runs on released shopping capabilities, as one pickup order on a test restaurant shows.
- Donations (#924): sent back to scope the problem first.
Lodging, already a draft, drew its first implementer feedback. An engineer whose GitHub profile lists DERTOUR Group filed eight proposals on October 15, from traveller identity fields to SEPA direct debit. On October 25, Openbooking, a French corporate hotel-booking platform, asked how a business checks a traveller's entitlement to a negotiated rate (#991).
Amazon's Tech Council member also proposed a hosted business directory, a business identity capability and event webhooks (our write-up).
The industry
On the earnings calls
Two of the companies behind these protocols named them on their third-quarter calls. We quote only the published transcripts (Alphabet, Meta).
Alphabet, October 28. Philipp Schindler, Google's SVP and Chief Business Officer, in prepared remarks: "The Universal Commerce Protocol, UCP, is being rapidly adopted by retailers. Today, UCP enables direct checkout for hundreds of thousands of brands across Google, including Chewy, Nike, Tapestry, and many more. We are combining this with the Agent Payments Protocol as we build for the future of commerce." In the Q&A he called agentic experiences "clearly additive".
Google's count covers checkout across its own surfaces; our census counts public profiles at /.well-known/ucp. Both can be true at once.
Meta, October 21. Mark Zuckerberg said more than 10 million people in the US and Canada had set up Muse personal agents, and that shopping is Muse's most common use. Susan Li, the CFO, said she expects the market to "evolve away from agents attempting to navigate every digital experience like a human" towards "more permissioned, structured interactions", and named the Personal Agent Protocol as the standard Meta is developing with partners.
What to watch in November
- Wix order, and Wix on 2026-08-25. Either would move a census-wide figure in a day.
- Salla and Zid validating. One template fix each would add hundreds of stores to the map.
- A second Commerce Cloud storefront. A Salesforce template turning on would look very different from one store.
- Location's third platform. It would show whether location becomes part of the standard surface.
- The B2B and Local Services decisions at the Governing Council.
- The December 10 release, and the version split it starts.
- Walmart's Agent Profiles reaching customer accounts, and which agents the gateway admits.
- The next earnings calls. Shopify and Walmart report in November. The first company to report spend completed by agents, not stores enabled for them, would be a new kind of number.
Nine months in, the question has changed again. In September, a platform could change thousands of storefronts in a day. In October, the news came from outside the census: a cart that spans retailers, a social app that requires the protocol, a platform shipping UCP features by name, a retailer that wrote rules for agents, and UCP on an earnings call. The stores are increasingly ready. The rest of the year is about who sends agents to them, and on what terms.
We'll see you in November.
About UCP Checker
UCP Checker is the independent validation and observability layer for the Universal Commerce Protocol. We crawl, validate and grade every public UCP manifest we can find, run the merchant directory, the UCP Score, live adoption stats, the vertical guides and the authority-bound vendor map, and track the spec as it evolves so you don't have to — measured from two vantages (what a business declares, and what actually happens when an agent transacts), the same way for everyone, without picking winners.
Sources
- UCP releases and pull requests, GitHub, merged September 22 to October 30, 2026
- Payments Tech Council minutes, October 15, 2026, merged
- Governing Council minutes, October 16, 2026, merged
- Shopping Tech Council minutes, October 23, 2026, merged
- Bulk Product Discovery working group minutes, October 28, 2026, merged
- Alphabet Third Quarter 2026 Earnings Call transcript, Alphabet, October 28, 2026
- Meta Platforms Third Quarter 2026 Results Conference Call transcript, Meta, October 21, 2026
- Shopify Editions, Fall '26, Shopify, October 2026
- Introducing Universal Cart, Google, October 15, 2026
- From Discovery to Decision: How Agentic Solutions Guide Intent and Drive Action, TikTok for Business, October 5, 2026
- Walmart Makes It Possible for Agents to Shop on Behalf of Customers, Walmart, October 21, 2026
- Walmart Agentic Access Terms, Walmart, October 21, 2026 Version
- Introducing the Personal Agent Protocol, Sierra, October 6, 2026
- Personal Agent Protocol changelog, version 0.2 published October 24, 2026; draft 0.3 in progress
- TechCrunch: While Amazon blocks AI agents, Walmart rolls out the welcome mat, October 21, 2026
- UCP Checker stats, platforms, capabilities and transports, read October 30, 2026
Related coverage: The State of Agentic Commerce, September 2026 · UCP's Return Policy Extension · /.well-known/ucp Joins the IANA Registry · Walmart's Agentic Access Terms, Explained
