ucp-demo-t2.appointedd-bookings.com
verified_user Multi-version UCP compliance, backward compatibility & transport audit
schedule Last scanned 5/4/2026
Conformance
68%Capability
100%Coverage
28%Backward Compat
20%Negative
38%Transport
100%Latency
94%Audit Details
Cache-Control max-age is within recommended bounds
No Cache-Control header — clients may re-fetch every request
Profile response advertises cache headers
Discovery response has no Cache-Control header
Profile declares at least the checkout capability
Completed in 209ms
Capability version strings are valid ISO dates
Completed in 242ms
Profile response Content-Type is application/json
Completed in 208ms
Discovery endpoint exposes CORS headers
Completed in 210ms
Profile is served over HTTPS
Completed in 337ms
Two consecutive profile fetches return identical bodies
Completed in 386ms
Signing JWKs use only allowed kty/crv values
Completed in 212ms
No duplicate capability entries (same name + version)
Completed in 243ms
OpenAPI servers[] URL is reachable
Profile has no loadable service-level OpenAPI document
Business profile has a valid structure
Completed in 200ms
Merchant responses are signed with the published signing_keys
Merchant publishes signing_keys but did not sign this response (no X-UCP-Signature / RFC 9421 / body JWS). Signing is recommended so agents can verify response authenticity.
robots.txt allows AI agents to read the UCP profile
Completed in 598ms
All declared schema URLs use HTTPS
Completed in 217ms
Signing keys are importable via Web Crypto
1 of 1 signing key(s) failed Web Crypto import
Profile advertises well-formed signing keys
Completed in 223ms
Service binding transports are in the allowed set
Completed in 227ms
Profile declares a ucp.version string
Completed in 195ms
Profile ucp.version is one the grader recognizes
Completed in 213ms
Profile is served at the canonical .well-known/ucp path
Completed in 223ms
Declared capabilities match operations in the OpenAPI
No OpenAPI operations available to cross-check
Capability JSON Schemas declare a modern $schema draft
Capability-level JSON Schemas are well-formed
OpenAPI components.schemas has no orphans
Profile has no loadable service-level OpenAPI document
Service-level OpenAPI document is valid OpenAPI 3.x
No service-level OpenAPI schema was loaded
Every OpenAPI operation declares a 2xx JSON response schema
Profile has no loadable service-level OpenAPI document
Every $ref referenced schema document is reachable
Completed in 2504ms
All declared schema URLs return 200
2 of 4 schema URLs failed to load: [service] https://ucp.dev/services/shopping/openrpc.json → http_404 [payment] https://ucp.dev/schemas/payment-handlers/delegate-payment-config.json → http_404
Discovery profile matches the published JSON Schema
Completed in 242ms
Canceling a session twice with the same idempotency key is idempotent
First cancel returned status=200
Cancel a checkout session
cancelSession returned 200
Create checkout session with defaults
Checkout session failed schema validation
Repeated createSession with same idempotency key returns same session
Completed in 1300ms
Create session then set shipping address
setShippingAddress returned 200
Retrieve a checkout session by id
getSession returned 200
Reusing an Idempotency-Key with a different body must be rejected
Server accepted a second create with the same idempotency key but a different currency (USD → EUR). Per the spec, the second call must be rejected.
update_checkout is idempotent on replay and rejects conflicting replays
First update returned status=200
Select a shipping method on a checkout session
setShippingAddress returned 200
Shipping methods are returned after setting an address
setShippingAddress returned 200
Catalog capability advertised for product lookup
Profile does not declare dev.ucp.shopping.catalog.lookup
Catalog capability is declared
Profile does not declare dev.ucp.shopping.catalog.search
Checkout capability is declared and reachable
Completed in 630ms