For shops: become agent-ready

Five steps that make your shop machine-readable for AI agents and raise your score here.

1. UCP – /.well-known/ucp

The Universal Commerce Protocol (UCP) describes what your shop offers agents: catalog search, cart, checkout, orders. The manifest is JSON served at https://your-shop.example/.well-known/ucp.

{
  "ucp": {
    "version": "2026-08-25",
    "services": { "dev.ucp.shopping": [ { "version": "2026-08-25", "transport": "mcp", "endpoint": "https://your-shop.example/api/ucp/mcp" } ] },
    "capabilities": { "dev.ucp.shopping.checkout": [ { "version": "2026-08-25" } ], "dev.ucp.shopping.cart": [ { "version": "2026-08-25" } ] },
    "payment_handlers": { "com.google.pay": [ { "id": "gpay", "version": "2026-01-11" } ] }
  }
}

Shopify merchants: In our checks Shopify serves a UCP manifest for a very large share of active stores itself. See the Shopify docs (shopify.dev) for whether and how you can control it. Specification: ucp.dev. Also useful: an HTTP header Link: </.well-known/ucp>; rel="ucp".

2. WebMCP

WebMCP lets pages register tools in the browser for agents (e.g. product search, add to cart). We do not read, test or score these tools; we only note whether a homepage contains such a hint.

3. MCP – /.well-known/mcp

If you run your own MCP server, publish a JSON description at /.well-known/mcp or name the endpoint in the UCP manifest. This earns score points.

4. /llms.txt

A short Markdown file with guidance for language models: who you are and where catalog, shipping, returns and contact live.

# Your Shop
> One sentence about what you sell and where you ship.

## Key pages
- [Catalog](https://your-shop.example/collections/all)
- [Shipping](https://your-shop.example/policies/shipping-policy)
- [Returns](https://your-shop.example/policies/refund-policy)

5. robots.txt: decide deliberately

We record whether six well-known AI bots are blocked entirely. If you want agent purchases, do not block agents such as ChatGPT-User, OAI-SearchBot or PerplexityBot. That is your call; we only record whether bots are shut out, not whether that is right.

User-agent: *
Allow: /

# Block only what you really want to block, e.g.:
# User-agent: GPTBot
# Disallow: /

Sitemap: https://your-shop.example/sitemap.xml

Afterwards

Submit your domain; we check it ourselves and re-check regularly. Submit a shop