Mcp Ucp

io.github.codesparPublished by GitHub account codesparv0.1.4Updated Oct 27, 2026

Google UCP — agentic shopping, cart, checkout, orders, delivery

VerifiedSTDIODesktop onlyFinance Business & Commerce

Server details

Identifier: io.github.codespar/mcp-ucp
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account codespar for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.codespar%2Fmcp-ucp.svg)](https://sourceweft.com/mcp/io.github.codespar%2Fmcp-ucp?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Deprecated MCP server for Google's UCP agentic commerce spec, exposing product, cart, checkout, order and delivery tools that reach no live service.

What you can do: Search merchant catalogs and read product details, pricing, variants and availability
List merchants and check stock or delivery availability for a location
Create, fill, inspect and clear shopping carts, and get delivery options
Start checkout, apply a payment method and confirm orders
Read, list, cancel orders, request returns and track shipments
Link buyer identity and read buyer profile and preferences
When to use it: Only for reference or experimentation with the UCP tool surface, or if you already have a working UCP-compatible endpoint to point it at. It is not usable for real shopping today, since the README states the package is deprecated and no tool reaches a service.
Requirements: Runs locally via npx from the npm package @codespar/mcp-ucp (Node.js). Requires the UCP_API_KEY environment variable, sent as a Bearer token; optional UCP_MERCHANT_ID and UCP_SANDBOX. A working base URL is needed via UCP_BASE_URL, because the default Google endpoints return 404 or fail TLS.

Before you install

The package is deprecated on npm and no tool reaches a live service. UCP_API_KEY is sent as a Bearer credential on every request, and the README says no portal issues such credentials. The tools include checkout, payment, order confirmation, cancellation and returns, which would spend money or change order data if a real endpoint were configured.

Installation

In SourceWeft

Open Mcp Ucp in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-ucp

Deprecated: no live endpoint. Measured on 2026-09-27: commerce.googleapis.com answers every path with Google's generic Error 404 (Not Found) page, and sandbox.commerce.googleapis.com (used with UCP_SANDBOX=true) fails the TLS handshake, because the certificate served there covers *.googleapis.com and not the extra label. UCP is an open specification, not an API Google hosts. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with UCP_BASE_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

MCP server for Google UCP — Universal Commerce Protocol for agentic shopping, cart, checkout, orders, and delivery

[npm] [License: MIT]

What is UCP?

Universal Commerce Protocol (UCP) is Google's open standard for agentic commerce. It enables AI agents to autonomously discover products, build carts, checkout, manage orders, and track deliveries — without screen-scraping or bespoke merchant integrations.

UCP works alongside AP2 (payment processing) and A2A (agent-to-agent interoperability), with MCP as the transport layer.

Quick Start

Claude Desktop

json

{  "mcpServers": {    "ucp": {      "command": "npx",      "args": ["-y", "@codespar/mcp-ucp"],      "env": {        "UCP_API_KEY": "your-key",        "UCP_MERCHANT_ID": "your-merchant-id"      }    }  }}

{  "mcpServers": {    "ucp": {      "command": "npx",      "args": ["-y", "@codespar/mcp-ucp"],      "env": {        "UCP_API_KEY": "your-key",        "UCP_MERCHANT_ID": "your-merchant-id"      }    }  }}

Claude Code

Tools (20)

Tool	Purpose
`search_products`	Search merchant product catalog.
`get_product`	Get detailed product information including pricing, variants, availability, and reviews
`check_availability`	Check product stock and delivery availability for a specific location
`list_merchants`	List UCP-compatible merchants with optional category and region filters
`create_cart`	Create a new shopping cart for a merchant
`add_to_cart`	Add an item to the shopping cart
`remove_from_cart`	Remove an item from the shopping cart
`get_cart`	Get cart contents, item totals, taxes, and shipping estimates
`clear_cart`	Remove all items from the cart
`get_delivery_options`	Get available shipping and delivery options for a cart
`initiate_checkout`	Start the checkout process for a cart.
`apply_payment`	Apply a payment method to the checkout session.
`confirm_order`	Confirm and place the order.
`get_order`	Get order details including items, status, payment, and shipping info
`list_orders`	List orders with optional filters
`cancel_order`	Cancel a pending or confirmed order
`request_return`	Request a return or refund for a delivered order
`track_shipment`	Get real-time shipment tracking details for an order
`link_identity`	Link buyer identity for personalization and order history across merchants
`get_profile`	Get buyer profile, preferences, and linked merchants

UCP + AP2 + A2A — The Full Stack

AI Agent  └── MCP (tool interface)       └── UCP (commerce: discover → cart → checkout → order → delivery)            ├── A2A (agent-to-agent discovery & communication)            └── AP2 (payment: authorize → execute → settle)

AI Agent  └── MCP (tool interface)       └── UCP (commerce: discover → cart → checkout → order → delivery)            ├── A2A (agent-to-agent discovery & communication)            └── AP2 (payment: authorize → execute → settle)

Environment Variables

Variable	Required	Description
`UCP_API_KEY`	Yes	Sent as `Authorization: Bearer`
`UCP_MERCHANT_ID`	No	Sent as the `X-Merchant-Id` header
`UCP_SANDBOX`	No	`true` switches `BASE_URL` to `https://sandbox.commerce.googleapis.com/ucp/v1`, which fails TLS

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

Authentication

The server sends UCP_API_KEY as an Authorization: Bearer header and UCP_MERCHANT_ID as an X-Merchant-Id header on every request (src/index.ts:78-83).

There is no portal issuing those credentials. The developer portal this README used to link, developers.google.com/agents/commerce, answers HTTP 404.

License

MIT

Source: packages/payments/ucp/README.md at commit d0a519a

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v0.1.4LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts