UCP Checker
Back to status
turbomoka.it icon
UCP Score

UCP Score for turbomoka.it

UCP conformance score, top priorities, impact & effort matrix, and copy-paste fixes for every issue.

✓Verified
A97/100
Analyzed Oct 13, 2026 · 1 recommendation ·Shopify · v2026-08-25 latest
97
/ 100
UCP Score
A

turbomoka.it publishes a conforming profile with broad capability coverage.

Agent Discovery100
UCP Conformance93
Capability Coverage100
Working

Agent Discovery is solid (100/100).

Start Here

Publish the public keys agents use to check your messages

Verified

turbomoka.it publishes a valid UCP profile, with minor schema warnings.

Latency
260ms
Version
2026-08-25
Robots.txt
Allowed ✅

Top Priorities

1
Publish the public keys agents use to check your messages

Your UCP profile lists no public keys, so an agent cannot confirm that a message really came from your store.

Medium impact Medium effort

Impact & Effort Matrix

Prioritised recommendations by expected impact and implementation effort

Quick Wins(0)

High impact, low effort

  • No items
Strategic Investments(0)

High impact, high effort

  • No items
Incremental Gains(1)

Medium impact & effort

  • Publish the public keys agents use to check your messages
Consider Later(0)

Lower priority

  • No items

How you compare on Shopify

Response time benchmarked against 10,811 Shopifies we monitor.

fastShopify median 184msslow
Your store
260ms
Shopify percentile
Bottom quartile
Faster than 7% of Shopify stores
Cohort range
171–204ms
p25 to p75 (middle half)

Recommendations

All improvements ranked by priority, with evidence and actionable fixes.

1

Publish the public keys agents use to check your messages

Medium impact Medium effort

Your UCP profile lists no public keys, so an agent cannot confirm that a message really came from your store.

Why it matters

Agents use these keys to check that checkout messages really came from you. A store that takes payment through the agent needs them. A store that sends the buyer to its own checkout page can manage without them for now.

Show fix

Create an Ed25519 key pair. Add the public key to a "keys" list at the top level of your UCP profile, as in the example, and keep the private key on your server. Replace the key once a year, giving each new key its own "kid".

{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "<base64url-encoded-public-key>",
      "kid": "key-2026-04",
      "alg": "EdDSA"
    }
  ],
  "ucp": { ... }
}
UCP_MISSING_SIGNING_KEYS

Full Check Breakdown

Every signal we evaluate, grouped by category.

Functional probes ran Oct 5, 2026. Transport and URL resolution rows may be stale. Run a fresh check to re-probe.
Agent Discovery8/8 passed

Can AI agents find your store and its UCP profile?

  • HTTPSCore

    Profile served over a secure connection.

    Profile URL uses https://

    Why it matters

    Agents reject non-HTTPS endpoints outright. Signed payloads over HTTP are meaningless because the channel itself is tamperable.

  • UCP profile reachableCore

    Profile fetched OK from /.well-known/ucp.

    HTTP 200

    Why it matters

    Agents start every session by fetching this URL. If it 404s or times out, the store is invisible to agent commerce.

  • AI bot accessCore

    robots.txt allows agent crawlers to fetch the profile.

    robots.txt allows /.well-known/ucp

    Why it matters

    Agents respect robots.txt. Even a published profile gets ignored if the file is disallowed for known agent user-agents.

  • llms.txtExperimental

    Hand-written brief at /llms.txt for AI agents.

    Found at /llms.txt

    Why it matters

    Emerging convention (analogous to robots.txt). Recommendation/discovery agents read it for brand context, return policy, and crawl preferences.

  • sitemap.xmlCore

    XML sitemap published at /sitemap.xml.

    Found at /sitemap.xml

    Why it matters

    Tells agents which pages are canonical and how often they change. Without it, agents fall back to following internal links.

  • Open Graph tagsCore

    OG meta tags on the homepage.

    og:title and og:type/url present

    Why it matters

    OG tags drive how your store unfurls in agent surfaces, Slack, iMessage, and ChatGPT shares.

  • Organization schema (JSON-LD)Core

    Schema.org Organization (or OnlineStore) JSON-LD on homepage.

    Organization-typed JSON-LD detected

    Why it matters

    Gives agents a structured representation of your brand identity — used to verify you are who your profile claims you are.

  • Mobile viewport metaCore

    Viewport meta tag for mobile rendering.

    <meta name="viewport"> present

    Why it matters

    Mobile agent sessions render in browser sandboxes that respect this. Without it, screenshots taken by agents are unreadable.

UCP Conformance4/5 passed

Does your profile meet the published spec?

  • Profile passes schema validationCore

    Profile structure conforms to the published UCP spec.

    No structural errors

    Why it matters

    Strict UCP agents reject profiles with structural errors. The error code in the diagnostic shows which field failed.

  • Protocol version present and well-formedCore

    ucp.version follows YYYY-MM-DD format.

    Version: 2026-08-25

    Why it matters

    UCP versions are dates, not semver. Agents pick the closest matching schema based on this string.

  • Signing keys publishedCore

    Root-level keys array (canonical since 2026-07-12; legacy signing_keys also accepted) for response verification.

    No signing_keys at root (common for managed/redirect-checkout stores)

    Why it matters

    Required for tokenized payment flows in v2026-04-08+. Stores using checkout-link redirects (e.g. WooCommerce native) often skip this safely.

  • No validation warningsCore

    Profile passes structural and field-level rules.

    No outstanding validation issues

    Why it matters

    Each warning is a strict-spec deviation — the recommendations section above lists them with copy-code fixes.

  • Spec & schema URLs resolve (29)Core

    Resolves the 29 spec/schema URLs declared across the profile to confirm agents can fetch each one.

    All 29 URLs resolved.

    Why it matters

    Spec and schema URLs let agents validate request/response shapes before sending. Broken URLs degrade runtime validation to "best effort" and cause strict agents to refuse the capability entirely.

Capability Coverage5/5 passed

What operations can agents actually perform?

  • Capabilities declaredCore

    Number of agent-readable capabilities under ucp.capabilities.

    5 of 6 capability families detected: Checkout, Identity Linking, Cart Management, Order Management, Catalog. A family counts once however many namespaces or extensions declare it.

    Why it matters

    Capabilities tell agents what operations to attempt. More coverage = more sessions complete end-to-end without falling back to scraping.

  • Checkout capabilityCore

    Store declares a checkout-namespaced capability.

    dev.ucp.shopping.checkout detected

    Why it matters

    Without a checkout capability, agents can browse but can't complete a purchase end-to-end.

  • Transports declaredInterop

    Service transports (REST/MCP/A2A/Embedded) declared on services.

    MCP, EMBEDDED

    Why it matters

    Transports tell agents how to actually call your endpoints. MCP and REST are the most widely supported today.

  • Payment handlersCore

    Tokenized payment handlers registered for in-conversation checkout.

    3 handlers registered

    Why it matters

    Tokenized payment lets agents complete purchases without redirecting the buyer to a hosted checkout. Empty by design is valid for WooCommerce-style native checkouts.

  • MCP transport reachableInterop

    Live reachability check against https://2eauad-b9.myshopify.com/api/ucp/mcp.

    tools/list returned a JSON-RPC response in 229ms

    Why it matters

    A declared transport that does not respond means agents will hit a dead end the moment they try to use the capability — even if the profile itself looks perfect.

/llms.txt content

The plain-text brief this store publishes to AI agents. Captured on the most recent check.

5.6 KB2c070d04348c0127
mentions UCP
# Agent Instructions — Turbo Moka

You can browse products and shop at Turbo Moka's online store, https://turbomoka.it, on your user's behalf. This guide covers the Shop skill and UCP integration, directly or through browser-based WebMCP tools.

## Shop skill — recommended

Use the [Shop skill](https://shop.com/SKILL.md) to help your user shop with this store. Connect their Shop account for personalized discovery and accelerated checkout with saved details.

- Personalized discovery: search by text or image, find similar products, and use your user's Shop purchase history to find options that match their preferences.
- Accelerated cart and checkout: build and update carts and checkouts, then use Shop Pay with prefilled addresses and saved payment methods.
- Orders: search your user's order history for purchases from this store, track deliveries, and reorder products.

Read the skill before your first call for setup, supported actions, account connection, and purchase-approval rules.

## UCP integration

This store implements the [Universal Commerce Protocol](https://ucp.dev) for product discovery, carts, and checkout. Integrate directly with its service, or orchestrate shopping through browser-based WebMCP tools.

### Direct integration (MCP)

1. **Discover the store** — `GET https://turbomoka.it/.well-known/ucp` returns its UCP profile, including capabilities, service endpoints, and payment handlers.
2. **Discover available tools** — Connect to the MCP endpoint advertised in the profile (`https://turbomoka.it/api/ucp/mcp`) and use `tools/list` to retrieve available tools and their schemas.
3. **Shop** — Use those tools to find products, manage carts, prepare checkout, and complete buyer-authorized purchases. Follow returned statuses, messages, and handoff URLs when buyer action is required.

Use a compatible UCP version and follow the returned tool schemas. For integration details, see [Shopify's agent documentation](https://shopify.dev/docs/agents).

### Browser integration (WebMCP)

When working through a browser, use the WebMCP tools registered on this store's pages. The checkout page exposes UCP tools over WebMCP. These tools act on the checkout in the current browser session.

- **Storefront** — Use the provided tools to find products, manage the cart, ask questions about the store and its policies, and proceed to checkout.
- **Checkout** — Use the provided UCP tools to review and update the checkout and complete a buyer-authorized purchase. Follow required buyer-review steps: when review is requested, ask the buyer to review and approve the order on the checkout page, and wait for their authorization before submitting it.

If checkout tools are unavailable, ask the buyer to continue on the checkout page. Do not fall back to scripted form fills or page controls.

For integration details, see [Storefront WebMCP](https://shopify.dev/docs/api/web-mcp) and [Checkout WebMCP](https://shopify.dev/docs/agents/carts-and-checkout/checkout-webmcp).

## Interaction guidelines

- **Buyer authorization** — Place orders and submit payment only with the buyer's authorization. Follow required review and approval steps.
- **Agent traffic** — Agents must identify their requests as agent-initiated. Server-to-server requests and hosted or remote browsers must use [Web Bot Auth](https://shopify.dev/docs/api/storefront#identifying-bots-with-web-bot-auth) and follow the service's authentication requirements. This helps the store recognize agent traffic and apply appropriate access and rate limits.
- **Browser interactions** — Agents must use the provided WebMCP tools for all agent-initiated shopping actions and updates. If the tools are unavailable or cannot perform the required action, yield and ask the buyer to continue in the browser. Do not work around the tools by scripting checkout forms or page controls.
- **Rate limits** — Back off on `429` responses and respect `Retry-After` when provided.
- **Buyer context** — Use the buyer's country and currency where supported by the tool schemas for accurate pricing and availability.

## Read-only browsing

Prefer the structured information returned by the shopping tools described above. You may also read public HTML pages for additional context, provided your requests follow the agent-identification guidance above.

- Discover public URLs through `/sitemap.xml`.
- Read product pages at `/products/{handle}`.
- Browse collections at `/collections/all` or `/collections/{handle}`.
- Discover other public pages and articles through the sitemap.

Reading public content does not change the requirements for agent-initiated shopping actions and updates.


## Store Policies
- **Privacy policy**: https://turbomoka.it/policies/privacy-policy
- **Terms of service**: https://turbomoka.it/policies/terms-of-service
- **Refund policy**: https://turbomoka.it/policies/refund-policy
- **Shipping policy**: https://turbomoka.it/policies/shipping-policy


## Platform

This store is built on [Shopify](https://www.shopify.com), the commerce platform powering millions of stores worldwide. Shopify stores support UCP natively, enabling seamless agent-driven commerce. The Shop skill at
[https://shop.app/SKILL.md](https://shop.app/SKILL.md) works across every Shopify store — install it once and
your agent can transact everywhere.

- Start your own store: https://www.shopify.com/start
- Build and test against sample data: https://mock.shop (free mock Storefront GraphQL API, no store or auth needed)
- Shopify developer platform: https://shopify.dev
- Shop developer platform: https://shop.dev

- Agent discovery: the canonical agent-facing description of the store is at `/agents.md`. You're reading `/llms.txt`, which mirrors that content.
View source ↗

Capabilities Detected

UCP capabilities supported by this endpoint
Cart ✓ Bound 2026-08-25
Order Management ✓ Bound 2026-08-25
Checkout ✓ Bound 2026-08-25
Discount Extension ✓ Bound 2026-08-25
Fulfillment Extension ✓ Bound 2026-08-25
Permalink ✓ Bound 2026-08-25
Identity Linking ✓ Bound 2026-08-25
Catalog Lookup ✓ Bound 2026-08-25
Catalog Search ✓ Bound 2026-08-25
Dev Shopify Catalog Extension ✓ Bound 2026-08-25

Technical Vitals

Technical details for this UCP endpoint
UCP Status Verified
Endpoint https://turbomoka.it/.well-known/ucp
HTTP Status 200
UCP Version 2026-08-25
Transports MCP, EMBEDDED
Last Observed
Last Full Index

Embed your UCP Score

Drop the live grade into your README, status page, or marketing site. The badge auto-updates as your score changes.

UCP Score for turbomoka.it badge for https://ucpchecker.com/score/turbomoka.itLive preview
Markdown
[![UCP Score for turbomoka.it](https://ucpchecker.com/score/turbomoka.it/badge.svg)](https://ucpchecker.com/score/turbomoka.it)
HTML
<a href="https://ucpchecker.com/score/turbomoka.it"><img src="https://ucpchecker.com/score/turbomoka.it/badge.svg" alt="UCP Score for turbomoka.it"></a>
New · Early access open
Is turbomoka.it yours? Claim it & monitor it daily

Prove ownership with one DNS record and the new monitoring dashboard watches it every day — score trends, break alerts, staging drift and a watchlist that benchmarks you against the field. Free while in beta.

Start monitoring →

This score reflects data from the most recent crawl. Run a fresh check to update, or read the methodology to see how each signal is scored.

Save this report

Track turbomoka.it's UCP score over time. We'll re-run the full check weekly and email you if the score drops, a capability regresses, or status flips.

Free. One email when something changes — no marketing. Privacy.