UCP status report

oxid7-75-vlzx3djj.patsy-dev.payone-office.de

Q: What is a UCP profile?

The JSON file a store publishes at /.well-known/ucp to tell UCP agents which services it offers, how to call them and how it takes payment. The spec calls it the business profile. oxid7-75-vlzx3djj.patsy-dev.payone-office.de's is 4.0 KB, written for UCP 2026-08-25. What goes in a UCP profile.

Q: How was oxid7-75-vlzx3djj.patsy-dev.payone-office.de checked?

With public requests on 3 Nov 2026: we read /.well-known/ucp and robots.txt, validated the profile against UCP 2026-08-25, checked that its spec and schema links resolve, and called its REST and MCP service. No sign-in and no purchase. How we check.

Verified

oxid7-75-vlzx3djj.patsy-dev.payone-office.de publishes a valid UCP profile. That is what it declares. An observed agent run shows how far an agent actually gets.

CustomREST, MCPHTTP 200 in 252 msrelease 2026-08-25

UCP Score 93/100 grade A · ready for UCP agents To fix 3 nothing breaks the spec

Passed 16 checks

Checked 3 Nov 08:57 UTC · signed public requests

Findings

16 passed · 3 to fix

Discovery

HTTPS

https

Profile URL uses https://

https

UCP profile reachable

/.well-known/ucp

HTTP 200

/.well-known/ucp

AI bot access

robots.txt

robots.txt allows /.well-known/ucp

robots.txt

UCP profile

To fix

Fix broken spec or schema URLs

spec, schema

One or more spec/schema URLs declared in the profile do not resolve.

spec, schema

Profile passes schema validation

ucp

No structural errors

ucp

Protocol version present and well-formed

ucp.version

Version: 2026-08-25

ucp.version

Public keys published

keys

Keys published at the top level

keys

No validation warnings

ucp

No outstanding validation issues

ucp

Services

Problem

Make declared services answer with UCP

ucp.services

https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/ucp answered search_catalog with HTTP 200, not a UCP response.

ucp.services

Capabilities declared

capabilities

4 of 6 capability families detected: Checkout, Cart Management, Order Management, Catalog. A family counts once however many namespaces or extensions declare it.

capabilities

Checkout capability

shopping.checkout

dev.ucp.shopping.checkout detected

shopping.checkout

Transports declared

services

REST, MCP

services

Payment handlers

payment_handlers

2 handlers registered

payment_handlers

MCP transport reachable

transport: mcp

tools/list returned a JSON-RPC response in 243ms

transport: mcp

Outside UCP

To fix

Publish Organization schema (JSON-LD) on the homepage

JSON-LD

No Organization-typed JSON-LD detected on your homepage.

JSON-LD

llms.txt

/llms.txt

Found at /llms.txt

/llms.txt

sitemap.xml

/sitemap.xml

Found at /sitemap.xml

/sitemap.xml

Open Graph tags

og: meta

og:title and og:type/url present

og: meta

Mobile viewport meta

meta viewport

meta viewport

Check trace

How oxid7-75-vlzx3djj.patsy-dev.payone-office.de answered our check

The five ways an agent can reach this store, what each one met, and every request we made.

2 of 5 open
7 requests · 3.82 s at the store · signed requests

01Hosting ↗

Finding the profile

Open
02Identity Linking ↗

Acting for the buyer

Not offered
03Embedded ↗

In the buyer's browser

Not offered
04Services ↗

Calling its services

Open
05continue_url ↗

Sending the buyer to the website

Not declared

UCP CheckerUCPCheckerBot/1.0

Signed · Web Bot Auth
key K_DlV2MybP…

How to verify us ↗

Finding the profile/.well-known/ucp · 200
1. GET /robots.txt200 OK180 ms
2. GET /.well-known/ucp200 OK252 ms
read from profileActing for the buyernot declared
read from profileIn the buyer's browsernot declared
Calling its servicesREST, MCP · answered · 14 tools
1. POST /api/mcp200 OK243 ms
2. POST /api/ucp/catalog/search200 OK263 ms
read from profileSending to the websitenot declared
Outside UCPhomepage · /llms.txt
1. GET /llms.txt200 OK303 ms
2. GET /sitemap.xml200 OK305 ms
3. GET /200 OK394 ms
Checked its linksspec · schemas · handlers
1. ucp.dev · 15 requests3 did not answer: 404 Not Foundup to 1,712 ms

Open

01 · Finding the profile2 requests

Served at /.well-known/ucp with 200 OK, 4.0 KB. robots.txt allows /.well-known/ucp.

Not offered

02 · Acting for the buyerread from profile

The profile doesn't declare identity linking, so an agent can't act for a signed-in buyer.

Not offered

03 · In the buyer's browserread from profile

No Embedded service is declared.

Open

04 · Calling its services2 requests

The REST service answered search_catalog with HTTP 200, not a UCP response. The MCP service answered tools/list in 243 ms, 14 tools.

Not declared

05 · Sending the buyer to the websiteread from profile

No permalink declared. Whether error replies carry a continue_url shows only in an agent run.

01 · Finding the profile2 requests · 2 × 200 OK437 ms

GET /robots.txt 200 OK 588 B · text/plain 180 ms

Answered.

DNS 0 ms
Connect 11 ms
TLS 52 ms
Wait 116 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/robots.txt
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/plain
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: text/plain

GET /.well-known/ucp 200 OK 4.0 KB · application/json 252 ms

Answered.

DNS 0 ms
Connect 7 ms
TLS 50 ms
Wait 193 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/.well-known/ucp
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=3600, public, s-maxage=3600

04 · Calling its services2 requests · 2 × 200 OK263 ms

POST /api/mcp 200 OK 5.8 KB · application/json 243 ms

Answered.

DNS 0 ms
Connect 62 ms
TLS 52 ms
Wait 128 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/mcp
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: application/json
Got cache-control: no-store, no-cache, must-revalidate

POST /api/ucp/catalog/search 200 OK 15 B · application/json 263 ms

Answered.

DNS 0 ms
Connect 7 ms
TLS 105 ms
Wait 149 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/ucp/catalog/search
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: application/json
Got cache-control: no-store, no-cache, must-revalidate

Outside UCP · its other files3 requests · 3 × 200 OK394 ms

GET /llms.txt 200 OK 707 B · text/plain 303 ms

Answered.

DNS 0 ms
Connect 59 ms
TLS 111 ms
Wait 131 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/llms.txt
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: text/plain
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: text/plain; charset=utf-8
Got cache-control: max-age=3600, public

GET /sitemap.xml 200 OK 364 B · application/xml 305 ms

Answered.

DNS 0 ms
Connect 112 ms
TLS 62 ms
Wait 130 ms
Download 0 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/sitemap.xml
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/xml,text/xml
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: application/xml; charset=utf-8
Got cache-control: max-age=3600, public

GET / 200 OK 73.4 KB · text/html 394 ms

Answered.

DNS 0 ms
Connect 7 ms
TLS 162 ms
Wait 210 ms
Download 15 ms

URL: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/
Server: 34.8.133.87
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: Apache/2.4.68 (Debian)
Got content-type: text/html; charset=UTF-8

Links in the profile · spec, schemas, handlers15 requests · 12 × 200 OK · 3 × 404 Not Found1,713 ms

GET ucp.dev/2026-08-25/services/shopping/mcp.openrpc.json 200 OK 12.6 KB · application/json 942 ms

Answered.

DNS 0 ms
Connect 66 ms
TLS 837 ms
Wait 37 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/services/shopping/mcp.openrpc.json
Server: 185.199.108.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/schemas/shopping/checkout.json 200 OK 4.8 KB · application/json 943 ms

Answered.

DNS 0 ms
Connect 184 ms
TLS 725 ms
Wait 32 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/checkout.json
Server: 185.199.108.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/services/shopping/rest.openapi.json 200 OK 39.2 KB · application/json 947 ms

Answered.

DNS 0 ms
Connect 5 ms
TLS 896 ms
Wait 44 ms
Download 1 ms

URL: https://ucp.dev/2026-08-25/services/shopping/rest.openapi.json
Server: 185.199.111.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/schemas/shopping/cart.json 200 OK 4.9 KB · application/json 952 ms

Answered.

DNS 0 ms
Connect 304 ms
TLS 611 ms
Wait 36 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/cart.json
Server: 185.199.110.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/schemas/shopping/order.json 200 OK 4.1 KB · application/json 978 ms

Answered.

DNS 0 ms
Connect 544 ms
TLS 382 ms
Wait 51 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/order.json
Server: 185.199.109.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/schemas/shopping/fulfillment.json 200 OK 14.6 KB · application/json 979 ms

Answered.

DNS 0 ms
Connect 668 ms
TLS 263 ms
Wait 46 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/fulfillment.json
Server: 185.199.108.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/schemas/shopping/buyer_consent.json 200 OK 6.9 KB · application/json 989 ms

Answered.

DNS 0 ms
Connect 783 ms
TLS 155 ms
Wait 50 ms
Download 0 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/buyer_consent.json
Server: 185.199.110.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: application/json; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/specification/shopping/checkout/ 200 OK 315.8 KB · text/html 1,024 ms

Answered.

DNS 0 ms
Connect 125 ms
TLS 781 ms
Wait 35 ms
Download 81 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/checkout/
Server: 185.199.111.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/specification/shopping/fulfillment/ 404 Not Found 1,070 ms

Nothing at this address.

DNS 0 ms
Connect 608 ms
TLS 321 ms
Wait 24 ms
Download 115 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/fulfillment/
Server: 185.199.109.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8

GET ucp.dev/2026-08-25/schemas/shopping/catalog.json 404 Not Found 1,071 ms

Nothing at this address.

DNS 0 ms
Connect 424 ms
TLS 497 ms
Wait 69 ms
Download 80 ms

URL: https://ucp.dev/2026-08-25/schemas/shopping/catalog.json
Server: 185.199.108.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8

GET ucp.dev/2026-08-25/specification/shopping/cart/ 200 OK 134.2 KB · text/html 1,131 ms

Answered.

DNS 0 ms
Connect 245 ms
TLS 667 ms
Wait 64 ms
Download 154 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/cart/
Server: 185.199.111.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/specification/shopping/catalog/ 200 OK 184.0 KB · text/html 1,180 ms

Answered.

DNS 0 ms
Connect 364 ms
TLS 554 ms
Wait 24 ms
Download 237 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/catalog/
Server: 185.199.109.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/specification/shopping/buyer-consent/ 404 Not Found 1,200 ms

Nothing at this address.

DNS 0 ms
Connect 729 ms
TLS 205 ms
Wait 44 ms
Download 220 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/buyer-consent/
Server: 185.199.108.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8

GET ucp.dev/2026-08-25/specification/shopping/order/ 200 OK 237.8 KB · text/html 1,357 ms

Answered.

DNS 0 ms
Connect 484 ms
TLS 439 ms
Wait 50 ms
Download 382 ms

URL: https://ucp.dev/2026-08-25/specification/shopping/order/
Server: 185.199.109.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8
Got cache-control: max-age=600

GET ucp.dev/2026-08-25/specification/overview/ 200 OK 555.6 KB · text/html 1,712 ms

Answered.

DNS 0 ms
Connect 842 ms
TLS 100 ms
Wait 2 ms
Download 767 ms

URL: https://ucp.dev/2026-08-25/specification/overview/
Server: 185.199.109.153
Sent user-agent: UCPCheckerBot/1.0 (+https://ucpchecker.com/methodology)
Sent accept: application/json, application/schema+json, */*
Sent signature-agent: "https://ucpchecker.com"
Sent signature: Web Bot Auth (RFC 9421)
Got server: GitHub.com
Got content-type: text/html; charset=utf-8
Got cache-control: max-age=600

01 PROFILEValid against the 2026-08-25 schema; keys published

How agents reach this store. oxid7-75-vlzx3djj.patsy-dev.payone-office.de's UCP profile (2026-08-25) declares two transports for dev.ucp.shopping: REST and MCP. One panel per transport, in the spec's words.

Capabilities

6 declared · all at 2026-08-25

Cart dev.ucp.shopping.cart

RESTMCP

Order Management dev.ucp.shopping.order

RESTMCP

Catalog dev.ucp.shopping.catalog

RESTMCP

Checkout dev.ucp.shopping.checkout

RESTMCP

Fulfillmentextension dev.ucp.shopping.fulfillment

RESTMCP

Buyer Consentextension dev.ucp.shopping.buyer_consent

RESTMCP

Payment handlers

2 declared

Google Pay google_pay

Pay By Link payone_pay_by_link

REST

10 operations the spec defines · 0 called

Endpointhttps://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/ucp

The operations the UCP spec defines for each capability in the profile, appended to the endpoint. REST has no list call, so we can only say what our check called.

Cartdev.ucp.shopping.cart

We don't call these: they change state.

POST/cartsDeclared, not called

GET/carts/{id}Declared, not called

PUT/carts/{id}Declared, not called

POST/carts/{id}/cancelDeclared, not called

Checkoutdev.ucp.shopping.checkout

We don't call these: they change state.

POST/checkout-sessionsDeclared, not called

GET/checkout-sessions/{id}Declared, not called

PUT/checkout-sessions/{id}Declared, not called

POST/checkout-sessions/{id}/completeDeclared, not called

POST/checkout-sessions/{id}/cancelDeclared, not called

Orderdev.ucp.shopping.order

Not part of our public check.

GET/orders/{id}Declared, not called

Also declared, with no operations of their own

Catalogdev.ucp.shopping.catalog

No operations of its own.

Fulfillmentdev.ucp.shopping.fulfillment

Extends checkout. No operations of its own.

Buyer consentdev.ucp.shopping.buyer_consent

Extends checkout. No operations of its own.

MCP

14 listed · 6 of 10 the spec defines

Endpointhttps://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/mcp

The tools the UCP spec defines for each capability in the profile, checked against what the store's MCP service listed when we asked (tools/list). Struck through: defined for this capability, not listed.

Cartdev.ucp.shopping.cart

create_cartget_cartupdate_cartcancel_cart

Checkoutdev.ucp.shopping.checkout

create_checkoutget_checkoutupdate_checkoutcomplete_checkoutcancel_checkout

Orderdev.ucp.shopping.order

get_order

Other toolsnot tied to a declared capability

add_to_cartcheck_payment_statuscreate_payment_linkexecute_checkoutget_product_detailsremove_from_cartsearch_productsupdate_cart_item

Also declared, with no operations of their own

Catalogdev.ucp.shopping.catalog

No operations of its own.

Fulfillmentdev.ucp.shopping.fulfillment

Extends checkout. No operations of its own.

Buyer consentdev.ucp.shopping.buyer_consent

Extends checkout. No operations of its own.

UCP profile as served 4.0 KB as served · 98 lines

{
    "ucp": {
        "version": "2026-08-25",
        "services": {
            "dev.ucp.shopping": [
                {
                    "version": "2026-08-25",
                    "transport": "rest",
                    "endpoint": "https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/ucp",
                    "spec": "https://ucp.dev/2026-08-25/specification/overview/",
                    "schema": "https://ucp.dev/2026-08-25/services/shopping/rest.openapi.json"
                },
                {
                    "version": "2026-08-25",
                    "transport": "mcp",
                    "endpoint": "https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/mcp",
                    "spec": "https://ucp.dev/2026-08-25/specification/overview/",
                    "schema": "https://ucp.dev/2026-08-25/services/shopping/mcp.openrpc.json"
                }
            ]
        },
        "capabilities": {
            "dev.ucp.shopping.checkout": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/checkout/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/checkout.json"
                }
            ],
            "dev.ucp.shopping.cart": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/cart/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/cart.json"
                }
            ],
            "dev.ucp.shopping.catalog": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/catalog/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/catalog.json"
                }
            ],
            "dev.ucp.shopping.order": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/order/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/order.json"
                }
            ],
            "dev.ucp.shopping.fulfillment": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/fulfillment/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/fulfillment.json",
                    "extends": "dev.ucp.shopping.checkout"
                }
            ],
            "dev.ucp.shopping.buyer_consent": [
                {
                    "version": "2026-08-25",
                    "spec": "https://ucp.dev/2026-08-25/specification/shopping/buyer-consent/",
                    "schema": "https://ucp.dev/2026-08-25/schemas/shopping/buyer_consent.json",
                    "extends": "dev.ucp.shopping.checkout"
                }
            ]
        },
        "payment_handlers": {
            "com.payone.pay_by_link": [
                {
                    "id": "payone_pay_by_link",
                    "version": "2026-08-25",
                    "config": {
                        "environment": "sandbox"
                    }
                }
            ],
            "com.google.pay": [
                {
                    "id": "google_pay",
                    "version": "2026-08-25",
                    "config": {
                        "api_version": 2,
                        "api_version_minor": 0,
                        "environment": "TEST"
                    }
                }
            ]
        },
        "agent_guide": {
            "about": "OXID eShop powered by OXID eShop 7 and PAYONE Commerce Platform (UCP 2026-08-25).",
            "rules": [
                "Use create_checkout or create_payment_link to generate a PAYONE Pay-By-Link URL and always share the continue_url / payment_url directly with the buyer."
            ]
        }
    },
    "keys": []
}

What goes in a UCP profile →Check your JSON in the Validator →Guides by store platform →

/llms.txt as served 707 B · mentions UCP

# OXID eShop

> Universal Commerce Protocol (UCP {self::UCP_VERSION}) enabled storefront powered by OXID eShop 7 and PAYONE Commerce Platform.

## UCP Discovery & Endpoints
- UCP Profile: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/.well-known/ucp
- REST Endpoint: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/ucp
- MCP Endpoint: https://oxid7-75-vlzx3djj.patsy-dev.payone-office.de/api/mcp

## Agent Instructions
- Use `search_products` / `search_catalog` to discover products.
- Use `create_checkout` or `add_to_cart` to build a shopping session.
- For payments, invoke `complete_checkout` or `create_payment_link` and present the returned `continue_url` / `payment_url` to the buyer.

Is oxid7-75-vlzx3djj.patsy-dev.payone-office.de your store?

Claim it with one DNS record.

Claim this store Send an agent to shop here ↗

Status badge

Markdown ·

[![UCP Status](https://ucpchecker.com/badge/oxid7-75-vlzx3djj.patsy-dev.payone-office.de)](https://ucpchecker.com/status/oxid7-75-vlzx3djj.patsy-dev.payone-office.de)

Questions

Can UCP agents buy from oxid7-75-vlzx3djj.patsy-dev.payone-office.de?

Through its REST and MCP services, an agent can build a cart and start a checkout. The service answered our check. This is what the store declares and what our check reached; an observed agent run shows how far an agent actually gets.

Is oxid7-75-vlzx3djj.patsy-dev.payone-office.de ready for UCP agents?

oxid7-75-vlzx3djj.patsy-dev.payone-office.de publishes a valid UCP profile and scores 93/100 (grade A). 3 things to fix: make declared services answer with UCP, fix broken spec or schema URLs and publish Organization schema (JSON-LD) on the homepage.

What is a UCP profile?

The JSON file a store publishes at /.well-known/ucp to tell UCP agents which services it offers, how to call them and how it takes payment. The spec calls it the business profile. oxid7-75-vlzx3djj.patsy-dev.payone-office.de's is 4.0 KB, written for UCP 2026-08-25. What goes in a UCP profile.

How was oxid7-75-vlzx3djj.patsy-dev.payone-office.de checked?

With public requests on 3 Nov 2026: we read /.well-known/ucp and robots.txt, validated the profile against UCP 2026-08-25, checked that its spec and schema links resolve, and called its REST and MCP service. No sign-in and no purchase. How we check.