Shopify UCP Explained: Agent Profiles, Trust Tiers and Checkout Limits

The Universal Commerce Protocol (UCP) is the open standard Shopify co-developed with Google for how AI agents transact with merchants. If you build a shopping agent on Shopify, UCP decides what your agent may do: search, build a cart, or complete a purchase. The deciding factor is how your agent identifies itself. This guide covers the four-stage flow, the three trust tiers, and what the limits mean in practice. Checked against Shopify’s developer documentation in October 2026.

What Shopify UCP Is and Who Backs It

UCP covers the full commerce journey, from discovery to carts to checkout. Shopify says it has broad industry support from Amazon, Meta, Microsoft, Salesforce, Stripe, Etsy, Target and Wayfair. Shopify delivers it through UCP-compliant MCP servers, so UCP is the protocol and MCP is the transport.

Since the Spring ’26 Edition, you do not apply for access. You register an agent profile in the Developer Dashboard and call the public MCP endpoint. The full reference lives in Shopify’s agent docs.

The Four Stages of the Agent Flow

1. Negotiate and authenticate. Your agent hosts a profile at a well-known URL and references it on every request. Shopify uses it to verify the agent and apply rate limits and tool access.
2. Discover products. Search the Global Catalog across merchants, or a Storefront Catalog scoped to one merchant.
3. Build carts and checkout. Cart MCP iterates on line items, localization and totals. Checkout MCP converts the cart to a checkout and refers the buyer to the merchant storefront to pay. Trusted agents can complete checkout directly.
4. Monitor orders. Order webhooks report fulfillment, refunds, returns, exchanges and cancellations. The get_order tool fetches fresh state on demand.

The Three Trust Tiers

Shopify classifies UCP traffic by how much it knows about the caller. Stronger identification earns higher rate limits and more sensitive tools.

• Token. You authenticate with a credential issued in the Dev Dashboard, such as a global API token, customer accounts token or shop access token, sent as a JWT bearer token. This tier has the highest limits. It can call complete_checkout when the token is granted permission to complete purchases, and get_order with the read_global_api_orders scope, limited to orders placed through your agent. A buyer-linked token, which carries a signed-in Shop customer’s identity, also returns personalized catalog results and applies automatic discounts at checkout.
• Signed. You have no API key but sign requests with HTTP Message Signatures (RFC 9421) using ECDSA P-256. Shopify checks the signature against the public key in your well-known profile. You get cart and checkout tools at lower limits, with no complete_checkout and no order tools.
• Anonymous. You send no credentials. You can search the catalog and build or edit carts and checkouts at the lowest limits, and nothing else.

Set Up the Tooling

Shopify ships a UCP CLI with structured commands for searching the catalog, building carts, creating checkouts, handing off buyers and tracking orders. The AI Toolkit adds a ucp skill that helps your coding agent apply best practices against each merchant’s live schema. You need Node 18 or higher.

npm install -g @shopify/ucp-cli
claude plugin install shopify-ai-toolkit@claude-plugins-official

For other editors, the agent docs list the matching plugin command. To compare the toolkit with Shopify’s other AI tools, see Shopify AI Toolkit vs Dev MCP.

Design Rules That Follow From the Limits

• Iterate in Cart MCP, check out late. Checkout MCP is rate-limited more strictly than Cart MCP at every tier, so reserve it for buyers who are ready to purchase.
• Use webhooks for updates, get_order for lookups. Subscribe to order webhooks for proactive changes. Call get_order only for buyer-initiated views and to reconcile a missed webhook. Verify every webhook signature, as shown in Shopify Webhooks: Set Up, Verify, and Debug Them.
• Climb the tiers deliberately. Prototype anonymously, add signed requests for better limits, and move to a token only when you need to complete checkout or read orders.

Our Analysis: What the Tiers Really Mean

Identity is the currency. The tiers do not gate by the size of your company. They gate by how verifiable your agent is. An anonymous agent can fill a cart but cannot close a sale. That is a sensible abuse model, and it means the road to real checkout runs through credentials issued in the Dev Dashboard.

The merchant checkout still matters. For most agents, the cart becomes a checkout and the buyer pays on the merchant’s storefront. Your checkout, and any rules you built into it, stay part of an agent-led purchase. Our guide to cart validation Functions is still relevant. For trusted agents that complete checkout directly, we have not seen Shopify document how every extension behaves, so test those flows on a development store before relying on them.

Open standard, Shopify on-ramp. UCP is open, has competitors on its backer list, and is built to work across several transports. Still, the Global Catalog, Shop sign-in and the Universal Cart (currently an early-access waitlist) are Shopify’s own pieces. Shopify has also said promoted placements will give builders a way to earn revenue from Catalog-driven sales. It has not said whether placements affect how merchants rank. Watch that detail. It decides whether agent discovery stays a data-quality game or becomes a paid one. For the merchant side of that game, read Shopify Agentic Storefronts: get your catalog ready.

This article is part of our Shopify Agentic Commerce guide.

Update, October 2026: Shopify storefronts now advertise UCP version 2026-08-25 in their /.well-known/ucp discovery profiles. According to Shopify’s changelog, the supported capabilities are unchanged and existing integrations need no changes. For the browser-based route, see Shopify Checkout WebMCP.

FAQ about Shopify UCP

Do merchants need to implement UCP? No. Shopify hosts the MCP servers. UCP matters if you build an agent.

Is UCP the same as MCP? No. UCP defines the commerce operations. MCP is the transport Shopify uses to expose them.

Which tier do I need? Anonymous is enough to prototype. You need a token to complete purchases or read orders.