A

Protocol

LOW

UCP MCP-transport entries have valid HTTPS endpoints

Every UCP service entry declaring `transport: "mcp"` carries an absolute HTTPS endpoint. If you advertise MCP transport, agents will try to connect — broken or non-HTTPS endpoints fail silently and lose the integration.

What this check looks for

MCP (Model Context Protocol) is an optional UCP transport. When a merchant declares an MCP-transport entry, agents that speak MCP will attempt to connect; an invalid or non-HTTPS endpoint will silently fail. We score only when MCP is advertised: no MCP entries → `na`.

Which AI surfaces it affects

  • Microsoft Copilot60
  • Google AI Mode (UCP)50
  • ChatGPT (ACP)20
  • Perplexity20
  • Meta AI10

Weighted against the live specs — ACP 2026-04-17, UCP 2026-04-08.

How to fix it

Make every declared MCP transport endpoint an absolute HTTPS URL

Shopify

Developer
  1. If your MCP integration is hosted externally (e.g., behind an edge worker), set the `endpoint` to the public HTTPS URL.

Platform docs ↗

BigCommerce

Developer
  1. Point the MCP `endpoint` at the HTTPS URL serving your MCP server.

Platform docs ↗

WooCommerce

Developer
  1. Host the MCP endpoint on a TLS-enabled domain and reference it under the UCP profile's MCP transport entry.

Platform docs ↗

Custom / headless

Developer
  1. Provision the MCP endpoint over TLS and reference it from `/.well-known/ucp` under `transport: "mcp"`.
<!-- /.well-known/ucp (excerpt) -->
{
  "services": [
    {
      "namespace": "shopping",
      "version": "2026-04-08",
      "spec": "https://ucp.dev/2026-04-08/specification/shopping/",
      "transport": "mcp",
      "endpoint": "https://example.com/mcp/shopping",
      "schema": "https://example.com/mcp/shopping/manifest.json"
    }
  ]
}

The spec it's pinned to

  • UCP overview — transport declarations

    UCP services optionally advertise `transport: "mcp"` for Model Context Protocol consumers. When advertised, the entry MUST resolve to a valid absolute `https://` endpoint so agents can connect safely.

Model Context Protocol ↗

Does your store pass this check?

Run the full audit — 82 checks across five AI shopping surfaces. Most tools only check whether you get mentioned; we check whether an agent can buy from you.

Related protocol checks

← All 82 checks