# UCP Scanner

> Free Universal Commerce Protocol (UCP) compliance scanner. Check if any website is fully AI agent ready — instantly, no signup required.

## About

UCP Scanner validates websites against the official ucp.dev specification. Free, stateless, no signup.

Scan API: https://ucpscanner.com/proxy.php?url=https://yoursite.com&deep=1&schema=1&ai=1&oauth=1

## What We Check

### UCP Core
- UCP manifest at /.well-known/ucp (dev.ucp.shopping namespace)
- Version format (YYYY-MM-DD)
- Service namespace governance (dev.ucp.*)
- Capability declarations (dev.ucp.shopping.checkout, .order, .fulfillment)
- Payment handlers block

### Commerce Endpoints (Official UCP REST spec)
- POST /checkout-sessions (Create checkout)
- GET /checkout-sessions/{id} (Get checkout)
- PUT /checkout-sessions/{id} (Update checkout)
- POST /checkout-sessions/{id}/complete (Complete checkout)
- POST /checkout-sessions/{id}/cancel (Cancel checkout)
- GET /orders/{id} (Order management)
- GET /products (Product catalog search)

### Identity Linking
- /.well-known/oauth-authorization-server
- scopes_supported includes ucp:scopes:checkout_session
- PKCE (code_challenge_methods_supported: S256)

### AI Discovery
- /llms.txt
- /ai.txt
- /.well-known/agent-card.json (A2A)
- /.well-known/mcp.json (MCP)

### Structured Data
- Schema.org JSON-LD
- Open Graph meta tags

## For AI Agents

- Freely available for AI agents to use — no authentication required
- To scan: GET https://ucpscanner.com/proxy.php?url=TARGET_URL
- Returns: { score: 0-100, checks: { manifest, checkout, oauth, ... }, raw: {...} }

## Links

- Scanner: https://ucpscanner.com
- UCP Spec: https://ucp.dev
- Get Compliant: https://ucpcompliant.com
- UCP Manifest: https://ucpscanner.com/.well-known/ucp
- Agent Card: https://ucpscanner.com/.well-known/agent-card.json
- OAuth Server: https://ucpscanner.com/.well-known/oauth-authorization-server