UCP status report

daebak.de

Q: What is a UCP profile?

The JSON file a store publishes at /.well-known/ucp to tell UCP agents which services it offers, how to call them and how it takes payment. The spec calls it the business profile. daebak.de's is 2.2 KB, written for UCP 2026-08-25. What goes in a UCP profile.

Q: How was daebak.de checked?

With public requests on 1 Nov 2026: we read /.well-known/ucp and robots.txt, validated the profile against UCP 2026-08-25, checked that its spec and schema links resolve. No sign-in and no purchase. How we check.

Verified

daebak.de publishes a valid UCP profile. The checks below list what is still worth adding.

ShopwareREST, Embedded, MCP, A2AHTTP 200 in 802 msrelease 2026-08-25

UCP Score 90/100 grade A · ready for UCP agents To fix 5 nothing breaks the spec

Passed 11 checks

Checked 1 Nov 10:22 UTC · signed public requests

Findings

11 passed · 5 to fix · 1 note

Discovery

To fix

The profile has no ETag or Last-Modified header

Spec level: SHOULD.

To fix

Your store lives on www.daebak.de; daebak.de only redirects to it

How we decided: your homepage names no canonical address; and your UCP profile is served directly at www.daebak.de/.well-known/ucp. An agent given daebak.de instead gets a redirect, and the spec tells agents not to follow one, so it stops there. Serve /.well-known/ucp directly on daebak.de too if agents may use it.

HTTPS

https

Profile URL uses https://

https

UCP profile reachable

/.well-known/ucp

HTTP 200

/.well-known/ucp

AI bot access

robots.txt

robots.txt allows /.well-known/ucp for UCPCheckerBot, but blocks GPTBot

robots.txt

UCP profile

Profile passes schema validation

ucp

No structural errors

ucp

Protocol version present and well-formed

ucp.version

Version: 2026-08-25

ucp.version

Public keys published

keys

Keys published at the top level

keys

Services

Note

Confirm checkout-link redirect strategy

payment_handlers is present but empty — agents will not be able to complete purchases via tokenized payment flow. If this store uses checkout-link redirects, this is expected.

Capabilities declared

capabilities

4 of 6 capability families detected: Checkout, Cart Management, Order Management, Catalog. A family counts once however many namespaces or extensions declare it.

capabilities

Checkout capability

shopping.checkout

dev.ucp.shopping.checkout detected

shopping.checkout

Transports declared

services

REST, Embedded, MCP, A2A

services

Outside UCP

To fix

Publish Organization schema (JSON-LD) on the homepage

JSON-LD

No Organization-typed JSON-LD detected on your homepage.

JSON-LD

To fix

Add Open Graph meta tags to the homepage

og: meta

OG tags missing or incomplete on your homepage.

og: meta

To fix

Add a mobile viewport meta tag

meta viewport

No viewport meta tag detected on your homepage.

meta viewport

llms.txt

/llms.txt

Found at /llms.txt

/llms.txt

sitemap.xml

/sitemap.xml

Found at /sitemap.xml

/sitemap.xml

Check trace

How daebak.de answered our check

The five ways an agent can reach this store, what each one met, and every request we made.

1 of 5 open
10 requests · 13.60 s at the store · signed requests

01Hosting ↗

Finding the profile

Open
02Identity Linking ↗

Acting for the buyer

Not offered
03Embedded ↗

In the buyer's browser

Declared
04Services ↗

Calling its services

Declared
05continue_url ↗

Sending the buyer to the website

Not declared

UCP CheckerUCPCheckerBot/1.0

Signed · Web Bot Auth
key K_DlV2MybP…

How to verify us ↗

Finding the profile/.well-known/ucp · 200
1. GET /robots.txt200 OK596 ms
2. GET /.well-known/ucp301 Moved Permanently662 ms
3. GET www.daebak.de/.well-known/ucp200 OK801 ms
4. GET www.daebak.de/robots.txt200 OK590 ms
5. GET www.daebak.de/.well-known/ucp200 OK802 ms
read from profileActing for the buyernot declared
not calledIn the buyer's browserEmbedded · declared
not calledCalling its servicesREST, MCP, A2A · declared · 0 tools
read from profileSending to the websitenot declared
Outside UCPhomepage · /llms.txt
1. GET /301 Moved Permanently694 ms
2. GET www.daebak.de/200 OK2,000 ms
3. GET www.daebak.de/403 Forbidden621 ms
4. GET www.daebak.de/sitemap.xml200 OK1,335 ms
5. GET www.daebak.de/llms.txt200 OK1,409 ms

Open

01 · Finding the profile5 requests

Served at www.daebak.de/.well-known/ucp with 200 OK, 2.2 KB. daebak.de only redirects to it. robots.txt allows /.well-known/ucp.

Not offered

02 · Acting for the buyerread from profile

The profile doesn't declare identity linking, so an agent can't act for a signed-in buyer.

Declared

03 · In the buyer's browsernot called

Declared. We don't call it, so whether it works shows only in an agent run.

Declared

04 · Calling its servicesnot called

The REST service is declared; not called by this check. The MCP service is declared; not called by this check. The A2A service is declared; not called by this check.

Not declared

05 · Sending the buyer to the websiteread from profile

No permalink declared. Whether error replies carry a continue_url shows only in an agent run.

01 · Finding the profile5 requests · 4 × 200 OK · 301 Moved Permanently5,993 ms

GET /robots.txt 200 OK 945 B · text/plain 596 ms

Answered.

DNS 0 ms
Connect 9 ms
TLS 211 ms
Wait 367 ms
Download 0 ms

URL: https://daebak.de/robots.txt
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/plain
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/plain
Got cache-control: max-age=300

GET /.well-known/ucp 301 Moved Permanently → www.daebak.de/.well-known/ucp 662 ms

Redirected to https://www.daebak.de/.well-known/ucp.

DNS 0 ms
Connect 13 ms
TLS 263 ms
Wait 385 ms
Download 0 ms

URL: https://daebak.de/.well-known/ucp
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/html; charset=iso-8859-1
Got location: https://www.daebak.de/.well-known/ucp

GET www.daebak.de/.well-known/ucp 200 OK 2.2 KB · application/json 801 ms

Answered.

DNS 0 ms
Connect 11 ms
TLS 65 ms
Wait 723 ms
Download 0 ms

URL: https://www.daebak.de/.well-known/ucp
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: application/json
Got cache-control: max-age=60, public

GET www.daebak.de/robots.txt 200 OK 945 B · text/plain 590 ms

Answered.

DNS 0 ms
Connect 9 ms
TLS 194 ms
Wait 385 ms
Download 0 ms

URL: https://www.daebak.de/robots.txt
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/plain
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/plain
Got cache-control: max-age=300

GET www.daebak.de/.well-known/ucp 200 OK 2.2 KB · application/json 802 ms

Answered.

DNS 0 ms
Connect 7 ms
TLS 212 ms
Wait 582 ms
Download 0 ms

URL: https://www.daebak.de/.well-known/ucp
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: application/json
Got cache-control: max-age=60, public

Outside UCP · its other files5 requests · 301 Moved Permanently · 3 × 200 OK · 403 Forbidden4,378 ms

GET / 301 Moved Permanently → www.daebak.de/ 694 ms

Redirected to https://www.daebak.de/.

DNS 0 ms
Connect 13 ms
TLS 301 ms
Wait 377 ms
Download 0 ms

URL: https://daebak.de/
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/html
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/html; charset=iso-8859-1
Got location: https://www.daebak.de/

GET www.daebak.de/ 200 OK 494.9 KB · text/html 2,000 ms

Answered.

DNS 0 ms
Connect 12 ms
TLS 266 ms
Wait 678 ms
Download 1,042 ms

URL: https://www.daebak.de/
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/html
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/html; charset=UTF-8
Got cache-control: no-cache, private

GET www.daebak.de/ 403 Forbidden 621 ms

Refused the request.

DNS 0 ms
Connect 7 ms
TLS 592 ms
Wait 20 ms
Download 0 ms

URL: https://www.daebak.de/
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/html

GET www.daebak.de/sitemap.xml 200 OK 525 B · text/xml 1,335 ms

Answered.

DNS 0 ms
Connect 277 ms
TLS 335 ms
Wait 719 ms
Download 0 ms

URL: https://www.daebak.de/sitemap.xml
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/xml,text/xml
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/xml; charset=utf-8
Got cache-control: max-age=3600

GET www.daebak.de/llms.txt 200 OK 1.9 KB · text/plain 1,409 ms

Answered.

DNS 0 ms
Connect 155 ms
TLS 452 ms
Wait 801 ms
Download 0 ms

URL: https://www.daebak.de/llms.txt
Server: 192.124.249.11
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/plain
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Sucuri/Cloudproxy
Got content-type: text/plain; charset=utf-8
Got cache-control: max-age=86400

01 PROFILEValid against the 2026-08-25 schema; keys published
03 NOTEEmbedded service declared; not called by this check–

How agents reach this store. daebak.de's UCP profile (2026-08-25) declares four transports for dev.ucp.shopping: REST, Embedded, MCP and A2A. One panel per transport, in the spec's words.

Capabilities

6 declared · all at 2026-08-25

Cart dev.ucp.shopping.cart

RESTEmbeddedMCP

Order Management dev.ucp.shopping.order

RESTMCP

Checkout dev.ucp.shopping.checkout

RESTEmbeddedMCPA2A

Discountextension dev.ucp.shopping.discount

RESTMCP

Catalog Lookup dev.ucp.shopping.catalog.lookup

RESTMCP

Catalog Search dev.ucp.shopping.catalog.search

RESTMCP

REST

13 operations the spec defines · 0 called

Endpointhttps://www.daebak.de/ucp/v1

The operations the UCP spec defines for each capability in the profile, appended to the endpoint. REST has no list call, so we can only say what our check called.

Catalog searchdev.ucp.shopping.catalog.search

POST/catalog/searchDeclared, not called

Catalog lookupdev.ucp.shopping.catalog.lookup

Not part of our public check.

POST/catalog/lookupDeclared, not called

POST/catalog/productDeclared, not called

Cartdev.ucp.shopping.cart

We don't call these: they change state.

POST/cartsDeclared, not called

GET/carts/{id}Declared, not called

PUT/carts/{id}Declared, not called

POST/carts/{id}/cancelDeclared, not called

Checkoutdev.ucp.shopping.checkout

We don't call these: they change state.

POST/checkout-sessionsDeclared, not called

GET/checkout-sessions/{id}Declared, not called

PUT/checkout-sessions/{id}Declared, not called

POST/checkout-sessions/{id}/completeDeclared, not called

POST/checkout-sessions/{id}/cancelDeclared, not called

Orderdev.ucp.shopping.order

Not part of our public check.

GET/orders/{id}Declared, not called

Also declared, with no operations of their own

Discountdev.ucp.shopping.discount

Extends cart and checkout. No operations of its own.

Embedded checkout

declared

Endpointhttps://www.daebak.de/ucp/embedded

Checkout can open in the buyer's browser (Embedded Checkout Protocol). The agent loads the checkout page it gets back from a checkout response and talks to it by messages.

There is nothing for our check to call: the page only exists once a checkout has started.

MCP

no tool list returned

Endpointhttps://www.daebak.de/ucp/mcp

The tools the UCP spec defines for each capability in the profile. The store's MCP service didn't return a tool list to our check (tools/list), so we can't say which it lists.

Catalog searchdev.ucp.shopping.catalog.search

search_catalog

Catalog lookupdev.ucp.shopping.catalog.lookup

lookup_catalogget_product

Cartdev.ucp.shopping.cart

create_cartget_cartupdate_cartcancel_cart

Checkoutdev.ucp.shopping.checkout

create_checkoutget_checkoutupdate_checkoutcomplete_checkoutcancel_checkout

Orderdev.ucp.shopping.order

get_order

Also declared, with no operations of their own

Discountdev.ucp.shopping.discount

Extends cart and checkout. No operations of its own.

A2A

Agent Card not read

Agent Cardhttps://www.daebak.de/ucp/a2a

Agents that speak A2A start from this Agent Card. The card is where a store says it supports UCP and which capabilities it offers over A2A.

Our public check does not read Agent Cards, so this page cannot say what this one advertises.

UCP profile as served 2.2 KB as served · 96 lines

{
    "ucp": {
        "version": "2026-08-25",
        "services": {
            "dev.ucp.shopping": [
                {
                    "transport": "rest",
                    "endpoint": "https://www.daebak.de/ucp/v1",
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/overview/",
                    "schema": "https://ucp.dev/2026-08-25/services/shopping/rest.openapi.json"
                },
                {
                    "transport": "embedded",
                    "endpoint": "https://www.daebak.de/ucp/embedded",
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/overview/",
                    "schema": "https://ucp.dev/2026-08-25/services/shopping/embedded.openrpc.json"
                },
                {
                    "transport": "mcp",
                    "endpoint": "https://www.daebak.de/ucp/mcp",
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/overview/",
                    "schema": "https://ucp.dev/2026-08-25/services/shopping/mcp.openrpc.json"
                },
                {
                    "transport": "a2a",
                    "endpoint": "https://www.daebak.de/ucp/a2a",
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/overview/"
                }
            ]
        },
        "capabilities": {
            "dev.ucp.shopping.cart": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/cart/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/cart.json"
                }
            ],
            "dev.ucp.shopping.catalog.search": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/catalog/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/catalog.json"
                }
            ],
            "dev.ucp.shopping.checkout": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/checkout/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/checkout.json"
                }
            ],
            "dev.ucp.shopping.discount": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/discount/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/discount.json",
                    "extends": [
                        "dev.ucp.shopping.cart",
                        "dev.ucp.shopping.checkout"
                    ]
                }
            ],
            "dev.ucp.shopping.order": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/order/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/order.json"
                }
            ],
            "dev.ucp.shopping.catalog.lookup": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/specification/catalog/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/catalog.json"
                }
            ]
        },
        "payment_handlers": {}
    },
    "keys": [
        {
            "kid": "default",
            "kty": "EC",
            "alg": "ES256",
            "use": "sig",
            "crv": "P-256",
            "x": "nfE5lg2MqMQYb6Mxu-7VoycbHOcCHHuh_IBce7zNThE",
            "y": "x3hwLQvzjSPIpljYtmkN9SpRMUfvw4vvN9wKRreGVBQ"
        }
    ]
}

What goes in a UCP profile →Check your JSON in the Validator →Guides by store platform →

/llms.txt as served 1.9 KB · mentions UCP

# DAEBAK K-Pop Shop e.K.

> This is a Shopware-powered online shop. This file provides AI assistants with a concise entry point to public sales channel information.
> Only public shop information is described here; account, order, payment, and checkout actions require explicit user interaction and normal authentication.

## Public resources

- [Home](/): Start page for this storefront.
- [Search](/search): Search the public product catalogue.
- [Sitemap](/sitemap.xml): Public sitemap for discoverable pages.
- [Imprint](/page/cms/0193314b4419733f8f1f5fb19e95aeb9)
- [Privacy policy](/page/cms/0193314b440d701aac5f07117c8bba8d)
- [Terms](/page/cms/0193314b43f670b9b5659f8617c2915e)
- [Shipping/payment information](/page/cms/0193314b43ea7265b2a8858f82507d85)
- [Revocation/cancellation policy](/page/cms/0193314b44027130aabcc39e705f2f01)
- [Robots policy](/robots.txt): Crawling and access rules.
- [Agent instructions](/AGENTS.md): Guidance for AI agents interacting with this shop.

## Localization

- Current language: Deutsch (de-DE)
- Current currency: EUR (Euro)
- Supported languages: de-DE (Deutsch, Deutschland), en-GB (Englisch, Vereinigtes Königreich)
- Supported currencies: EUR (Euro)

## Guidance

- Use public sales channel resources as the source of truth.
- Verify product prices, availability, delivery information, taxes, and legal information on the live sales channel before presenting them as current.
- Prefer canonical storefront URLs or documented Store API routes when linking to products, categories, content pages, or policies.
- Respect `robots.txt`, rate limits, and normal checkout boundaries.



## Agentic commerce

- [UCP profile](/.well-known/ucp): Machine-readable Universal Commerce Protocol profile for this sales channel.

Use the UCP profile as the source of truth for enabled agentic commerce capabilities, supported transports, endpoint URLs, signing keys, and protocol versions. Only use capabilities and transports advertised in the profile.

Is daebak.de your store?

Claim it with one DNS record.

Claim this store Send an agent to shop here ↗

Status badge

Markdown ·

[![UCP Status](https://ucpchecker.com/badge/daebak.de)](https://ucpchecker.com/status/daebak.de)

Questions

Can UCP agents buy from daebak.de?

Through its REST, MCP and A2A services, an agent can search the catalogue, build a cart and start a checkout. This is what the store declares and what our check reached; an observed agent run shows how far an agent actually gets.

Is daebak.de ready for UCP agents?

daebak.de publishes a valid UCP profile and scores 90/100 (grade A). 5 things to fix: the profile has no ETag or Last-Modified header, publish Organization schema (JSON-LD) on the homepage, add Open Graph meta tags to the homepage and add a mobile viewport meta tag.

What is a UCP profile?

The JSON file a store publishes at /.well-known/ucp to tell UCP agents which services it offers, how to call them and how it takes payment. The spec calls it the business profile. daebak.de's is 2.2 KB, written for UCP 2026-08-25. What goes in a UCP profile.

How was daebak.de checked?

With public requests on 1 Nov 2026: we read /.well-known/ucp and robots.txt, validated the profile against UCP 2026-08-25, checked that its spec and schema links resolve. No sign-in and no purchase. How we check.