diamondbraces.com
verified_user Multi-version UCP compliance, backward compatibility & transport audit
schedule Last scanned 5/4/2026
Conformance
39%Capability
100%Coverage
59%Backward Compat
60%Negative
100%Transport
86%Latency
98%Audit Details
Cache-Control max-age is within recommended bounds
Expected 200, got 301
Profile response advertises cache headers
Expected 200, got 301
Profile declares at least the checkout capability
Expected 200, got 301
Capability version strings are valid ISO dates
Expected 200, got 301
Profile response Content-Type is application/json
Expected 200, got 301
Discovery endpoint exposes CORS headers
Completed in 173ms
Profile is served over HTTPS
Completed in 210ms
Two consecutive profile fetches return identical bodies
Could not fetch profile twice (statuses 301 / 301)
Signing JWKs use only allowed kty/crv values
Expected 200, got 301
No duplicate capability entries (same name + version)
Expected 200, got 301
OpenAPI servers[] URL is reachable
Profile has no loadable service-level OpenAPI document
Business profile has a valid structure
Expected 200, got 301
Merchant responses are signed with the published signing_keys
Expected 200, got 301
robots.txt allows AI agents to read the UCP profile
Completed in 361ms
All declared schema URLs use HTTPS
Expected 200, got 301
Signing keys are importable via Web Crypto
Expected 200, got 301
Profile advertises well-formed signing keys
Expected 200, got 301
Service binding transports are in the allowed set
Expected 200, got 301
Profile declares a ucp.version string
Expected 200, got 301
Profile ucp.version is one the grader recognizes
Expected 200, got 301
Profile is served at the canonical .well-known/ucp path
Completed in 177ms
Declared capabilities match operations in the OpenAPI
No OpenAPI operations available to cross-check
Capability JSON Schemas declare a modern $schema draft
Capability-level JSON Schemas are well-formed
OpenAPI components.schemas has no orphans
Profile has no loadable service-level OpenAPI document
Service-level OpenAPI document is valid OpenAPI 3.x
No service-level OpenAPI schema was loaded
Every OpenAPI operation declares a 2xx JSON response schema
Profile has no loadable service-level OpenAPI document
Every $ref referenced schema document is reachable
9 of 68 referenced schema document(s) failed to load
All declared schema URLs return 200
Discovery profile matches the published JSON Schema
Expected 200 from /.well-known/ucp, got 301
Get a product by id
Expected 200 or 404, got 200
Search products returns a products array
Expected 2xx for query "shirt", got 200
Selected options filter variants in product detail
No product with options/variants found in catalog
Canceling a session twice with the same idempotency key is idempotent
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Cancel a checkout session
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Create checkout session with defaults
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Repeated createSession with same idempotency key returns same session
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Create session then set shipping address
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Retrieve a checkout session by id
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Reusing an Idempotency-Key with a different body must be rejected
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
update_checkout is idempotent on replay and rejects conflicting replays
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Select a shipping method on a checkout session
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Shipping methods are returned after setting an address
Merchant gates checkout creation behind authentication (HTTP 403); cannot probe further without credentials
Catalog capability advertised for product lookup
Catalog capability is declared
Checkout capability is declared and reachable
Completed in 87ms