What is UCP?
The Universal Commerce Protocol (UCP) is an open-source standard co-developed by Google and Shopify, with support from Etsy, Wayfair, Target, Walmart, and a growing list of commerce platforms. It defines how AI agents discover products, build carts, negotiate checkout terms, and complete transactions, all without human intervention. In plain English: UCP is the language that lets an AI agent shop on Google, checkout on your store, and pay through your processor, without you having to build a custom integration for every AI platform that might send you a customer. The protocol covers the full commerce lifecycle: catalog search, cart building, identity linking, checkout, and order management. It runs on REST and JSON-RPC, and integrates with the Agent Payments Protocol (AP2), Agent2Agent (A2A), and Model Context Protocol (MCP). Different systems can talk to each other without bespoke builds.
Why this matters for payments
Your next customer might not be a human clicking "buy now." It might be an AI agent acting on behalf of a human, comparing prices, checking delivery options, applying discount codes, and completing payment. According to eMarketer, AI platforms are expected to account for $20.9 billion in retail spending in 2026, almost four times 2025's figures. For payments, this is both an opportunity and a threat. The opportunity: new traffic, new volume. AI agents don't browse idly. They shop with intent. A user asks their agent for "the best running shoes under £100 with next-day delivery," and the agent queries every merchant that speaks UCP, compares results, and completes the purchase. If your store is UCP-enabled, you're in the running. If you're not, you're invisible. This isn't theoretical. Google has already enabled UCP-powered checkout in AI Mode on Google Search and the Gemini app. Shopify merchants can switch it on with a few lines of code. The traffic is coming. The question is whether your payments infrastructure can handle it. The threat: disintermediation.When an AI agent controls discovery, comparison, and checkout, the merchant's relationship with the customer weakens. The agent becomes the interface. The merchant becomes the fulfilment layer. And the payment processor becomes a commodity. The platforms that own the agent relationship (Google, OpenAI, Shopify) will control the flow of commerce. UCP is their attempt to make that flow open and standardised. Make no mistake though: power is shifting from merchants and processors to the platforms that own the AI.
How UCP works with payments
UCP doesn't handle payments directly. It handles the commerce layer (discovery, cart, checkout) and hands off to the Agent Payments Protocol (AP2) for the actual transaction. AP2, governed by the FIDO Alliance, uses cryptographically signed mandates to prove that a real user authorised a specific purchase. The flow looks like this:
- Intent mandate. The user tells their agent what they want ("buy me running shoes").
- Cart mandate. The agent assembles a cart from UCP-enabled merchants and presents it to the user for approval.
- Payment mandate. Once approved, the agent sends a signed Payment Mandate to the merchant's payment processor, which verifies the signature and completes the transaction.
The result is a cryptographically verifiable record of what the user authorised, what the agent selected, and what was charged. Fewer chargebacks for merchants, because the user explicitly approved the purchase. A new transaction flow for processors that requires AP2 support. One-click purchasing for customers through their AI assistant.
The standards war: UCP vs ACP vs AP2
UCP isn't the only player. By mid-2026, three rival standards govern agentic commerce:
- UCP (Google / Shopify): discovery, cart, checkout, orders, and post-purchase. Focused on merchant flexibility and open standards.
- ACP (OpenAI / Stripe): OpenAI's Agentic Commerce Protocol, integrated with Stripe for payments. Focused on ChatGPT and OpenAI's ecosystem.
- AP2 (FIDO Alliance): the payments layer. Vendor-neutral, cryptographically secure, designed to work with both UCP and ACP.
The most common mistake merchants make is treating these as competitors you have to choose between. They're not. They're complementary. UCP and ACP handle the commerce layer (what to sell, how to build the cart). AP2 handles the payments layer (how to prove the user authorised the transaction). A merchant that supports UCP and AP2 can accept purchases from Google AI, ChatGPT, and any other agent that speaks either protocol.
What you should do now
If you're a merchant, a payment processor, or a platform, UCP isn't optional. It's inevitable.
- Audit your catalog data. UCP requires structured product data. If your feed is messy, agents won't find you. Google has added dozens of new attributes in Merchant Center specifically for agentic discovery.
- Check your payment processor's AP2 support. Not all processors support AP2 yet. If yours doesn't, you're cut off from agentic transactions. Ask them. If they don't have a roadmap, consider switching.
- Enable UCP on your platform.Shopify merchants can enable it with minimal code. Custom platforms need to implement the protocol directly, but the documentation is open and the SDKs are available.
- Test your checkout for agentic flows.Agent-initiated checkouts behave differently from human-initiated ones. They don't browse. They don't hesitate. They don't tolerate friction. If your checkout has unnecessary steps, agents will skip you.
- Monitor agent-driven traffic. Once enabled, track where your UCP traffic comes from, what converts, and what doesn't. This is a new channel. Treat it like one. Agentic commerce is coming. If you want help preparing, from UCP enablement to AP2-ready payment processing, that's what we do. Get in touch if you're thinking about how AI agents will affect your checkout.
