ap.byt7.com
verified_user Multi-version UCP compliance, backward compatibility & transport audit
schedule Last scanned 5/4/2026
Conformance
43%Capability
75%Coverage
18%Backward Compat
0%Negative
9%Transport
100%Latency
99%Audit Details
Cache-Control max-age is within recommended bounds
Completed in 157ms
Profile response advertises cache headers
Completed in 184ms
Profile declares at least the checkout capability
Profile does not declare dev.ucp.shopping.checkout
Capability version strings are valid ISO dates
(instances ?? []) is not iterable
Profile response Content-Type is application/json
Completed in 188ms
Discovery endpoint exposes CORS headers
Completed in 188ms
Profile is served over HTTPS
Completed in 318ms
Two consecutive profile fetches return identical bodies
Completed in 341ms
Signing JWKs use only allowed kty/crv values
Completed in 202ms
No duplicate capability entries (same name + version)
Completed in 183ms
OpenAPI servers[] URL is reachable
Profile has no loadable service-level OpenAPI document
Business profile has a valid structure
Business profile failed schema validation
Merchant responses are signed with the published signing_keys
Merchant publishes signing_keys but did not sign this response (no X-UCP-Signature / RFC 9421 / body JWS). Signing is recommended so agents can verify response authenticity.
robots.txt allows AI agents to read the UCP profile
robots.txt wildcard (*) disallows /.well-known/ucp — every agent is blocked
All declared schema URLs use HTTPS
(bindings ?? []) is not iterable
Signing keys are importable via Web Crypto
1 of 1 signing key(s) failed Web Crypto import
Profile advertises well-formed signing keys
Completed in 183ms
Service binding transports are in the allowed set
(bindings ?? []) is not iterable
Profile declares a ucp.version string
Completed in 186ms
Profile ucp.version is one the grader recognizes
Completed in 184ms
Profile is served at the canonical .well-known/ucp path
Completed in 187ms
Declared capabilities match operations in the OpenAPI
No OpenAPI operations available to cross-check
Capability JSON Schemas declare a modern $schema draft
Profile declares no capability JSON Schemas
Capability-level JSON Schemas are well-formed
3 of 3 capability schemas are malformed
OpenAPI components.schemas has no orphans
Profile has no loadable service-level OpenAPI document
Service-level OpenAPI document is valid OpenAPI 3.x
No service-level OpenAPI schema was loaded
Every OpenAPI operation declares a 2xx JSON response schema
Profile has no loadable service-level OpenAPI document
Every $ref referenced schema document is reachable
Profile declares no loadable schema documents
All declared schema URLs return 200
3 of 3 schema URLs failed to load: [capability] https://ucp.dev/schemas/inventory.json → http_404 [capability] https://ucp.dev/schemas/checkout.json → http_404 [capability] https://ucp.dev/schemas/order.json → http_404
Cancel session response matches the OpenAPI schema
No REST binding advertised for shopping service (version 2026-01-11)
Create session response matches the OpenAPI schema
No REST binding advertised for shopping service (version 2026-01-11)
Discovery profile matches the published JSON Schema
Completed in 186ms
Get session response matches the OpenAPI schema
No REST binding advertised for shopping service (version 2026-01-11)
Update session response matches the OpenAPI schema
No REST binding advertised for shopping service (version 2026-01-11)
Canceling a session twice with the same idempotency key is idempotent
No REST binding advertised for shopping service (version 2026-01-11)
Cancel a checkout session
No REST binding advertised for shopping service (version 2026-01-11)
Create checkout session with defaults
No REST binding advertised for shopping service (version 2026-01-11)
Repeated createSession with same idempotency key returns same session
No REST binding advertised for shopping service (version 2026-01-11)
Create session then set shipping address
No REST binding advertised for shopping service (version 2026-01-11)
Retrieve a checkout session by id
No REST binding advertised for shopping service (version 2026-01-11)
Reusing an Idempotency-Key with a different body must be rejected
No REST binding advertised for shopping service (version 2026-01-11)
update_checkout is idempotent on replay and rejects conflicting replays
No REST binding advertised for shopping service (version 2026-01-11)
Select a shipping method on a checkout session
No REST binding advertised for shopping service (version 2026-01-11)
Catalog capability advertised for product lookup
Profile does not declare dev.ucp.shopping.catalog.lookup
Catalog capability is declared
Profile does not declare dev.ucp.shopping.catalog.search
Checkout capability is declared and reachable
No REST binding advertised for shopping service (version 2026-01-11)
Fulfillment capability is declared
Profile does not declare dev.ucp.shopping.fulfillment