FAIR

Federated and Independent Repositories

Universal Commerce Protocol (UCP) for WooCommerce

Plugin Banner

Universal Commerce Protocol (UCP) for WooCommerce

by siteupgradepro

Download
Description

UCP Ready transforms your WooCommerce store into an AI-agent-friendly commerce platform by implementing the Universal Commerce Protocol (UCP).

AI agents like Google’s shopping assistants, ChatGPT plugins, and custom MCP clients can now:

  • 🔍 Discover your store’s capabilities via a .well-known/ucp endpoint
  • 📦 Browse your product catalog with AI-optimized metadata
  • 🛒 Create checkout sessions with full shipping and discount support
  • 🔐 Authenticate via OAuth 2.0 Identity Linking
  • 💬 Communicate over REST, MCP (JSON-RPC), or Embedded Protocol bindings

Key Features

  • Multi-Transport Support — REST API, MCP (Model Context Protocol), and Embedded Protocol (EP) bindings
  • AI-Optimized Catalog — Products are served with quick facts and FAQs designed for agent consumption
  • OAuth 2.0 Identity Linking — Agents can act on behalf of authenticated users
  • Shipping & Fulfillment — Full integration with WooCommerce Shipping Zones
  • Discount Codes — Agents can apply coupon codes during checkout
  • GDPR Compliance — Buyer consent management built-in
  • Order Tracking — Agents can query order status and fulfillment events
  • Bot Tracker — Monitor AI agent traffic on your store
  • Built-in Simulator — Test the full agent flow from your WordPress admin

Who Is This For?

  • Store owners who want to be ready for the AI commerce revolution
  • Developers building AI shopping agents or MCP clients
  • Agencies deploying WooCommerce stores that need to be AI-discoverable

How It Works

  1. Install and activate the plugin
  2. Your store automatically exposes a UCP discovery endpoint at /.well-known/ucp
  3. AI agents find your store, browse products, and create checkout sessions
  4. Customers complete payment through your existing WooCommerce checkout

Links

External services

This plugin uses external JSON schemas from ucp.dev to define protocol responses.
* What the service is: ucp.dev is the central repository for the Universal Commerce Protocol schemas. The schema URLs are included in API responses so AI agents know how to parse the data.
* What data is sent and when: No personal, store, or customer data is sent to ucp.dev. The service is acting strictly as a static schema host.
* Service Policies: Terms of Use and Privacy Policy.

Automatic Installation

  1. Go to Plugins Add New in your WordPress admin
  2. Search for “UCP Ready”
  3. Click Install Now, then Activate

Manual Installation

  1. Download the plugin ZIP file
  2. Go to Plugins Add New Upload Plugin
  3. Upload the ZIP file and click Install Now
  4. Activate the plugin

Requirements

  • WordPress 5.8 or higher
  • WooCommerce 5.0 or higher
  • PHP 7.4 or higher
  • Pretty Permalinks enabled (Settings Permalinks)

After Activation

  • An API key is automatically generated for you
  • Discovery endpoints are registered at /.well-known/ucp
  • Visit Settings UCP & GEO Dashboard to see the AI Readiness Checklist and configure options
What is the Universal Commerce Protocol (UCP)?

UCP is an open protocol that enables AI agents to interact with online stores in a standardized way. It defines how agents discover stores, browse catalogs, create checkouts, and handle payments — all without screen scraping.

Do I need to modify my products?

No! The plugin works with your existing WooCommerce products out of the box. You can optionally add AI-optimized metadata (Quick Facts, FAQs) to enhance the agent experience.

Is this compatible with my payment gateway?

Yes. UCP creates standard WooCommerce orders. The customer completes payment through your existing checkout flow, so any payment gateway that works with WooCommerce will work with UCP.

What is MCP (Model Context Protocol)?

MCP is a JSON-RPC based protocol that allows AI models to call tools. UCP Ready exposes your store’s catalog and checkout as MCP tools that can be called by compatible AI agents.

Is the OAuth 2.0 flow secure?

Yes. The Identity Linking implementation follows RFC 6749 and RFC 8414 standards with:
* Authorization codes that expire in 5 minutes
* Token rotation on refresh
* Redirect URI validation
* Proper token revocation (RFC 7009)

Does this slow down my store?

No. The plugin only adds lightweight REST API endpoints and a small <link> tag to your HTML head. There is no impact on your storefront loading speed.

What data is shared with AI agents?

Only publicly available product data (name, price, description, images) is shared through the catalog API. Customer data is never exposed without explicit OAuth 2.0 authorization.

Can I restrict which agents access my store?

Yes. You can set an API key in the plugin settings. Only agents with the correct key can access the UCP endpoints.

1.0.4

  • Address WordPress.org review feedback (Contributors, Late Escaping, JSON-LD output).

1.0.3

  • Resolved WordPress.org review issues (Ownership verification, Prefixing).
  • Documented external schema usage.
  • Security fixes for inline scripts and REST permissions.

1.0.0

  • Initial release
  • REST, MCP, and Embedded Protocol transport bindings
  • Product catalog API with AI-optimized metadata
  • Checkout session creation with WooCommerce integration
  • OAuth 2.0 Identity Linking with token rotation
  • Shipping zone integration and fulfillment tracking
  • Discount/coupon code support
  • GDPR-compliant buyer consent management
  • Order status and fulfillment event tracking
  • AI bot traffic monitoring
  • Built-in E2E simulator for all transports
  • Comprehensive compliance test suite (22 test groups)
Back to top