UCP Checker
Check a store
UCP status report

zola.com

We could not read zola.com’s UCP profile: our request was refused (HTTP 403). That is what our crawler met, not a statement about how the store treats other agents.

Blocked
HTTP 403 Response 216 ms robots.txt allows /.well-known/ucp Checked 20 Oct, 10:00 UTC
Check trace

How zola.com answered our check

Our request for the profile got no profile back, so the other four ways in were never reached.

0 of 5 reached
2 requests · 216 ms at the store · public requests only
  1. 01Hosting ↗
    Finding the profile
    Refused
  2. 02Identity Linking ↗
    Acting for the buyer
    Not reached
  3. 03Embedded ↗
    In the buyer's browser
    Not reached
  4. 04Services ↗
    Calling its services
    Not reached
  5. 05continue_url ↗
    Sending the buyer to the website
    Not reached
UCP Checkerpublic requests
  • 2 requestsFinding the profile/.well-known/ucp · 403
  • Acting for the buyernot reached
  • In the buyer's browsernot reached
  • Calling its servicesnot reached
  • Sending to the websitenot reached
Refused
01 · Finding the profile2 requests
Our request for the profile was refused (403 Forbidden). robots.txt allows the path, so this came from a firewall or bot rule.
Not reached
The other four ways in
Without the profile there is no list of services, sign-in or links to try.
  1. 01 PROFILEGET /.well-known/ucp → 403 Forbidden216 ms
  2. 01 PROFILEGET /robots.txt → allows /.well-known/ucp–
  3. 01 PROFILENothing to validate: no profile was read–

What we requested

Request
GET https://zola.com/.well-known/ucp
Response
403 Forbidden, in 216 ms
robots.txt
Allows /.well-known/ucp, so the refusal came from the server, usually a firewall or bot-protection rule.
The fix
If this is your store, allow unauthenticated GET requests to /.well-known/ucp at your firewall or bot protection, then check again.
Is zola.com your store?
Claim it with one DNS record.
Claim this store

Questions

Why is zola.com's profile blocked?
Our request to /.well-known/ucp was refused (HTTP 403). This usually means a firewall or bot-protection rule is rejecting unauthenticated automated requests — even though the profile is supposed to be public. It is what our crawler met on that date, not a statement about how zola.com treats other agents.
Is this intentional?
Sometimes yes, sometimes no. Some stores deliberately block AI bots to protect content; others block it accidentally because their WAF treats every non-browser request as suspicious. The fix in either case is to explicitly allow /.well-known/ucp.
How was this UCP report for zola.com generated?
Our crawler fetches zola.com/.well-known/ucp directly, parses the profile against the official UCP JSON schema, checks robots.txt for its rules for AI crawlers, and runs payment-handler validation. No manual review, no opinions — just what the profile actually says. The check ran 1 day ago.
How do I get a newer result for zola.com?
This page shows the stored result of our last check and when it was observed. To run a new check, use Check again on this page.
Why does this status matter?
Universal Commerce Protocol is an open standard that lets a UCP agent find out what a store sells, build a cart and check out through a published contract instead of reading web pages. A valid UCP profile is how a store declares that support.