What does it mean that 3saf.com is verified for UCP?

It means 3saf.com publishes a valid UCP manifest at /.well-known/ucp, the manifest passes schema validation against 2026-04-08, and AI agents can discover its commerce capabilities without needing to scrape HTML. That is what the store declares. Whether an agent actually completes a purchase is a separate question — where an observed agent run is shown on this page, it answers that one.

Can I trust 3saf.com for AI agent purchases?

Verification means the store is technically ready — payment handlers declared, transports reachable, schema valid. It doesn't grade business reputation or fulfilment quality. For trust on the commerce side itself, check the store's own reviews. For trust on the agent integration side, this page is the source of truth.

What platform does 3saf.com use for UCP?

Our detection identifies 3saf.com as running on Salla. Many large UCP-verified stores use Shopify, BigCommerce, or custom stacks built on the open spec. The transport list above shows the exact mechanism (REST, MCP, A2A, Embedded) the manifest declares.

How was this UCP report for 3saf.com generated?

Our crawler fetches 3saf.com/.well-known/ucp directly, parses the manifest against the official UCP JSON schema, checks robots.txt for AI bot policies, and runs payment-handler validation. No manual review, no opinions — just what the manifest actually says. The check ran 2 hours ago.

How often is 3saf.com re-checked?

Every domain in our directory is re-crawled at least every 24 hours. You can also trigger a fresh check from this page at any time, or subscribe to alerts to get notified the moment the status changes — that's how we built the only continuously updated UCP directory on the internet.

Why does this status matter?

Universal Commerce Protocol is the standard AI shopping agents (ChatGPT, Claude, Gemini, Apple Intelligence) use to discover what a store sells, how to add items to a cart, and how to check out. If a store isn't UCP-verified, agents can still scrape it — but they'll be slower, less reliable, and far more likely to fail at checkout. UCP turns a guess into a guarantee.

Back to status

UCP Score

UCP Score for 3saf.com

UCP conformance score, top priorities, impact & effort matrix, and copy-paste fixes for every issue.

✓Verified

A95/100

Analyzed Sep 22, 2026 · 4 recommendations ·Salla · v2026-04-08 upgrade

/ 100

UCP Conformance Score

3saf.com publishes a conforming manifest with broad capability coverage.

Agent Discovery100

UCP Conformance88

Capability Coverage100

Working

Agent Discovery is solid (100/100).

Start Here

Use reverse-domain capability keys → Use reverse-domain payment handler keys → Use YYYY-MM-DD for handler version

Top Priorities

Use reverse-domain capability keys

A capability key does not match reverse-domain format (e.g. dev.ucp.shopping.checkout).

Medium impact Low effort

Use reverse-domain payment handler keys

A payment handler key is not in reverse-domain format.

Medium impact Low effort

Use YYYY-MM-DD for handler version

A payment handler version is not in YYYY-MM-DD format.

Medium impact Low effort

Impact & Effort Matrix

Prioritised recommendations by expected impact and implementation effort

Quick Wins(0)

High impact, low effort

No items

Strategic Investments(0)

High impact, high effort

No items

Incremental Gains(3)

Medium impact & effort

Use reverse-domain capability keys
Use reverse-domain payment handler keys
Use YYYY-MM-DD for handler version

Consider Later(1)

Lower priority

Upgrade to the latest UCP spec version

Recommendations

All improvements ranked by priority, with evidence and actionable fixes.

Use reverse-domain capability keys

Medium impact Low effort ×9

A capability key does not match reverse-domain format (e.g. dev.ucp.shopping.checkout).

Why it matters

Capability namespaces use reverse-domain identifiers to avoid collisions when stores extend the spec. "checkout" is ambiguous; "dev.ucp.shopping.checkout" is unambiguous.

Show fix

"capabilities": {
  "dev.ucp.shopping.checkout": [...]
}

UCP_CAPABILITY_INVALID_KEY

Use reverse-domain payment handler keys

Medium impact Low effort

A payment handler key is not in reverse-domain format.

Why it matters

Handlers use reverse-domain identifiers (e.g. com.google.pay, com.stripe.terminal) so multiple stores can declare the same logical handler.

Show fix

"payment_handlers": {
  "com.google.pay": [...]
}

UCP_HANDLER_INVALID_KEY

Use YYYY-MM-DD for handler version

Medium impact Low effort

A payment handler version is not in YYYY-MM-DD format.

Why it matters

Handler versions follow the same date-based format as everything else in UCP.

Show fix

"version": "2026-08-25"

UCP_HANDLER_INVALID_VERSION

Upgrade to the latest UCP spec version

Low impact Low effort

Your manifest declares a valid but older spec version. A newer published version is available.

Why it matters

Older versions stay valid (agents pin to the version you declare), but newer agent capabilities — embedded checkout, AP2 mandates, identity linking, 3DS payment authentication, payment terms and location lookup — only resolve against the latest spec. The manifest envelope barely moved: signing_keys went from inside ucp to the root as of 2026-04-08, and v2026-08-25 replaced it with keys (a JWK Set). Everything else in v2026-08-25 changed in the capability vocabulary, not the envelope.

Show fix

Bump version to 2026-08-25 and publish your public keys as a root-level keys array (JWK Set). Legacy signing_keys is still accepted, at the root or nested, but keys is the canonical field every verifier reads. See /specs/2026-08-25 for the full release notes.

"ucp": {
  "version": "2026-08-25",
  ...
},
"keys": [ ... ]   // JWK Set, sibling of ucp, not nested inside

UCP_VERSION_OUTDATED

Full Check Breakdown

Every signal we evaluate, grouped by category.

Agent Discovery8/8 passed

Can AI agents find your store and its UCP manifest?

HTTPSCore

Manifest served over a secure connection.

Manifest URL uses https://

Why it matters
Agents reject non-HTTPS endpoints outright. Signed payloads over HTTP are meaningless because the channel itself is tamperable.
UCP manifest reachableCore

Manifest fetched OK from /.well-known/ucp.

HTTP 200

Why it matters
Agents start every session by fetching this URL. If it 404s or times out, the store is invisible to agent commerce.
AI bot accessCore

robots.txt allows agent crawlers to fetch the manifest.

robots.txt allows /.well-known/ucp

Why it matters
Agents respect robots.txt. Even a published manifest gets ignored if the file is disallowed for known agent user-agents.
llms.txtExperimental

Hand-written brief at /llms.txt for AI agents.

Found at /llms.txt

Why it matters
Emerging convention (analogous to robots.txt). Recommendation/discovery agents read it for brand context, return policy, and crawl preferences.
sitemap.xmlCore

XML sitemap published at /sitemap.xml.

Found at /sitemap.xml

Why it matters
Tells agents which pages are canonical and how often they change. Without it, agents fall back to following internal links.
Open Graph tagsCore

OG meta tags on the homepage.

og:title and og:type/url present

Why it matters
OG tags drive how your store unfurls in agent surfaces, Slack, iMessage, and ChatGPT shares.
Organization schema (JSON-LD)Core

Schema.org Organization (or OnlineStore) JSON-LD on homepage.

Organization-typed JSON-LD detected

Why it matters
Gives agents a structured representation of your brand identity — used to verify you are who your manifest claims you are.
Mobile viewport metaCore

Viewport meta tag for mobile rendering.

<meta name="viewport"> present

Why it matters
Mobile agent sessions render in browser sandboxes that respect this. Without it, screenshots taken by agents are unreadable.

UCP Conformance3/4 passed

Does your manifest meet the published spec?

Manifest passes schema validationCore

Manifest structure conforms to the published UCP spec.

No structural errors

Why it matters
Strict UCP agents reject manifests with structural errors. The error code in the diagnostic shows which field failed.
Spec version present and well-formedCore

ucp.version follows YYYY-MM-DD format.

Version: 2026-04-08

Why it matters
UCP versions are dates, not semver. Agents pick the closest matching schema based on this string.
Signing keys publishedCore

Root-level keys array (canonical since 2026-07-12; legacy signing_keys also accepted) for response verification.

signing_keys present

Why it matters
Required for tokenized payment flows in v2026-04-08+. Stores using checkout-link redirects (e.g. WooCommerce native) often skip this safely.
Validation warnings clearCore

Manifest passes structural and field-level rules.

11 warnings

Why it matters
Each warning is a strict-spec deviation — the recommendations section above lists them with copy-code fixes.

Capability Coverage3/4 passed

What operations can agents actually perform?

Capabilities declaredCore

Number of agent-readable capabilities under ucp.capabilities.

5 capabilities detected

Why it matters
Capabilities tell agents what operations to attempt. More coverage = more sessions complete end-to-end without falling back to scraping.
Checkout capabilityCore

Store declares a checkout-namespaced capability.

dev.ucp.shopping.checkout detected

Why it matters
Without a checkout capability, agents can browse but can't complete a purchase end-to-end.
Transports declaredInterop

Service transports (REST/MCP/A2A/Embedded) declared on services.

REST, MCP

Why it matters
Transports tell agents how to actually call your endpoints. MCP and REST are the most widely supported today.
Payment handlersCore

Tokenized payment handlers registered for in-conversation checkout.

No handlers declared

Why it matters
Tokenized payment lets agents complete purchases without redirecting the buyer to a hosted checkout. Empty by design is valid for WooCommerce-style native checkouts.

/llms.txt content

The plain-text brief this store publishes to AI agents. Captured on the most recent check.

7.3 KB8aef4d55c4cce17f

mentions UCP

# عساف ASSAF

> عساف (ASSAF) هي علامة تجارية سعودية متخصصة في العطور الفاخرة، الساعات، النظارات الشمسية، والحقائب، بالإضافة إلى ملابس وأحذية الأطفال بالتعاون مع الفيرو مارتيني. تستهدف العلامة الرجال والنساء في المملكة العربية السعودية والخليج الباحثين عن منتجات تجمع بين التصاميم العصرية والجودة العالية، وقد حازت على جوائز في قطاع التجميل والجمال.

> تتراوح أسعار المنتجات من 115 ريال سعودي للعطور الصغيرة إلى 799 ريال سعودي للمجموعات الحصرية والساعات. يوفر المتجر معلومات الشحن وسياسات الإرجاع عبر موقعه الإلكتروني، مع تواجد واسع من خلال فروع فعلية في مراكز التسوق الكبرى مثل النخيل مول، الرياض بارك، وجدة بارك.
- WhatsApp: 920002040
- Email: [email protected]


## Supported Languages

- العربية (rtl)

## Product Categories

- [العطور](https://3saf.com/ar/Assaf-Perfumes-From-Najd-to-the-World/c1213658479): تشكيلة واسعة من العطور الرجالية والنسائية ومجموعات وايلد كولت وتوباكو
- [الساعات](https://3saf.com/ar/ASSAF-Watches-Timeless-Luxury-Designs/c253624104): ساعات فاخرة بتصاميم عصرية وكلاسيكية للرجال والنساء
- [النظارات](https://3saf.com/ar/assaf-sunglasses/c373143515): نظارات شمسية بتصاميم متنوعة تناسب مختلف الأذواق والاستخدامات
- [الفيرو مارتيني X عساف](https://3saf.com/ar/Assaf-X-Alviero-Martini/c651581810): ملابس وأحذية للأطفال والمواليد بتصاميم إيطالية أيقونية
- [الحقائب](https://3saf.com/ar/Bags-Collection/c288541216): مجموعة من الحقائب للنساء والأطفال بتصاميم حصرية وعصرية

## Top Products

- [قريس ايريك](https://3saf.com/ar/GRIS ERIK 200 ML/p1491376332): عطر بحجم 200 مل، الأكثر مبيعاً للاستخدام اليومي والمناسبات — ★ 5/5 (5380 reviews)
- [اروقيت كوميت](https://3saf.com/ar/Arrogate Comete/p2087989093): عطر من مجموعة أروقيت، يتميز برائحة مركزة، 375 ريال — ★ 5/5 (5177 reviews)
- [مس فلورا](https://3saf.com/ar/Miss Flora/p566436803): عطر نسائي برائحة الزهور المنعشة، 275 ريال — ★ 5/5 (965 reviews)
- [مجموعة وايلد وقريس مع صندوق العينات](https://3saf.com/ar/WILD COLT AND GRIS ERIK COLLECTION/p915316704): صندوق يجمع أشهر روائح عساف، 550 ريال — ★ 5/5 (883 reviews)
- [بخور وايلد كولت](https://3saf.com/ar/WILD COLT BAKHUR/p1822349968): بخور فاخر مستوحى من مجموعة وايلد كولت، 450 ريال — ★ 5/5 (313 reviews)
- [ريسك كوميت - خطر](https://3saf.com/ar/Risk Comete/p421143064): عطر رجالي بتركيبة قوية للحضور البارز، 400 ريال — ★ 5/5 (172 reviews)
- [مسك عساف مع باودر](https://3saf.com/ar/musk assaf collection/p769549373): مجموعة المسك والبودرة للعناية الشخصية اليومية، 399 ريال — ★ 5/5 (139 reviews)
- [كنق انيبل - ملك البخور](https://3saf.com/ar/KING ENABLE 150ML/p314554267): عطر بخور بحجم 150 مل للمناسبات الرسمية، 199 ريال — ★ 5/5 (115 reviews)
- [قليتش](https://3saf.com/ar/Glitch/p975628514): عطر بتركيبة فريدة وجريئة، 400 ريال — ★ 5/5 (111 reviews)
- [اروقيت ايفوريا](https://3saf.com/ar/ARROGATE EUPHORIA 150ML/p2010066121): عطر بحجم 150 مل من مجموعة أروقيت، 375 ريال — ★ 5/5 (85 reviews)
- [أروقيت بينك ديفا](https://3saf.com/ar/arrogate-pink-diva/p1151255571): عطر نسائي من أحدث الإصدارات، 375 ريال — ★ 5/5 (82 reviews)
- [نوبل](https://3saf.com/ar/noble/p598668494): عطر يومي بتركيبة خفيفة وسعر اقتصادي، 175 ريال — ★ 5/5 (47 reviews)
- [محموعة فرانكل 25 مل](https://3saf.com/ar/AURA COLLECTION 35/p2077147024): مجموعة عطور صغيرة مناسبة للسفر والإهداء، 359 ريال — ★ 5/5 (41 reviews)
- [هابي مومنت](https://3saf.com/ar/Happy Moments Perfume/p1861904468): عطر للمناسبات السعيدة واللحظات الجميلة، 249 ريال — ★ 5/5 (30 reviews)
- [بروينو بيقاسوس](https://3saf.com/ar/PROINO PEGASUS/p1262768806): عطر من مجموعة بيقاسوس بتركيبة منعشة، 275 ريال — ★ 5/5 (27 reviews)
- [نظارة عساف](https://3saf.com/ar/SUNGLASS ASSAF/p1051882173): نظارة شمسية بتصميم عصري للجنسين، 250 ريال — ★ 5/5 (17 reviews)
- [مجموعة ليدي 25 مل](https://3saf.com/ar/lady collection 25 ml/p1517236607): مجموعة عطور نسائية صغيرة متنوعة، 499 ريال — ★ 5/5 (39 reviews)

## Buying Guides

- [دليل العطور الأصلية](https://3saf.com/ar/blog/-/a-1619430114): نصائح ومعايير لاختيار العطور الأصلية في السوق السعودي
- [أفضل العطور الرجالية](https://3saf.com/ar/blog/-/a-1794518503): دليل شامل لاختيار العطر الذي يعبر عن الحضور الشخصي للرجل
- [رحلة في عبير الأنوثة](https://3saf.com/ar/blog/-/a-131556249): دليل لاكتشاف أفضل العطور النسائية المناسبة لمختلف الأذواق

## Support / FAQ

- [معلومات الشحن](https://3saf.com/ar/معلومات-الشحن-والاسترجاع/page-1596963084): تفاصيل التوصيل وسياسة الاستبدال والاسترجاع
- [فروع عساف](https://3saf.com/ar/فروع-عساف/page-1246358133): قائمة بمواقع فروع المتجر في مختلف مدن المملكة العربية السعودية
- [خدمة العملاء](https://3saf.com/ar/خدمة-العملاء/page-1777377556): قنوات التواصل المخصصة للشكاوى والاستفسارات
- [سياسة الخصوصية](https://3saf.com/ar/سياسة-الخصوصية/page-472613387): معلومات حول كيفية حماية واستخدام بيانات العملاء

## Docs

- [API Catalog](https://3saf.com/.well-known/api-catalog): Full list of available store API endpoints
- [MCP](https://3saf.com/mcp): Model Context Protocol endpoint for AI tool integration
- [UCP](https://3saf.com/.well-known/ucp): Universal Commerce Protocol discovery — agent-facing catalog search, cart, and checkout
- [Sitemap](https://3saf.com/sitemap.xml): Complete sitemap of all store pages and products
- [Robots.txt](https://3saf.com/robots.txt): Crawl and indexing directives for search engines
- [OAuth Discovery](https://3saf.com/.well-known/openid-configuration): OAuth 2.0/OpenID Connect discovery endpoint

Any store page can be returned as markdown by sending `Accept: text/markdown` in the request headers.

View source ↗

Capabilities Detected

UCP capabilities supported by this endpoint
Checkout	2026-04-08
Cart	2026-04-08
Catalog Search	2026-04-08
Catalog Lookup	2026-04-08
Fulfillment	2026-04-08
Discount	2026-04-08
Buyer Consent	2026-04-08
Order Management	2026-04-08
Identity Linking	2026-04-08

Technical Vitals

Technical details for this UCP endpoint
UCP Status	Verified
Endpoint	https://3saf.com/.well-known/ucp
HTTP Status	200
UCP Version	2026-04-08
Transports	REST, MCP
Last Observed	2026-09-22T10:10:56+00:00
Last Full Index	Sep 22, 2026 10:10 AM UTC

Embed your UCP Score

Drop the live grade into your README, status page, or marketing site. The badge auto-updates as your score changes.

Live preview

Markdown

[![UCP Score for 3saf.com](https://ucpchecker.com/score/3saf.com/badge.svg)](https://ucpchecker.com/score/3saf.com)

HTML

<a href="https://ucpchecker.com/score/3saf.com"><img src="https://ucpchecker.com/score/3saf.com/badge.svg" alt="UCP Score for 3saf.com"></a>

New · Early access open

Is 3saf.com yours? Claim it & monitor it daily

Prove ownership with one DNS record and the new monitoring dashboard watches it every day — score trends, break alerts, staging drift and a watchlist that benchmarks you against the field. Free while in beta.

Start monitoring →

This score reflects data from the most recent crawl. Run a fresh check to update, or read the methodology to see how each signal is scored.

Save this report

Track 3saf.com's UCP score over time. We'll re-run the full check weekly and email you if the score drops, a capability regresses, or status flips.

Free. One email when something changes — no marketing. Privacy.