Universal Commerce Protocol (UCP): 7 Things Marketers Need to Know About Google’s New Agentic Commerce Standard

Google's Universal Commerce Protocol is a shared set of rules that lets an AI agent shop and buy on a person's behalf across many retailers at once. Sundar Pichai announced it on January 11, 2026 at the National Retail Federation conference, published openly rather than licensed. The reason it matters is plumbing. Until now, every pairing of an AI assistant with a store needed a custom integration, which caps how many places an agent can actually transact. A common protocol removes that ceiling. It also settles the question retailers were right to worry about, because the design keeps the merchant in control of the sale instead of handing the customer relationship to whoever owns the assistant.

The shopping experience is about to fundamentally change. On January 11, 2026, Google CEO Sundar Pichai announced the Universal Commerce Protocol (UCP) at the National Retail Federation conference. This open standard enables AI agents to browse, compare, negotiate, and complete purchases on behalf of consumers without requiring custom integrations for every retailer.

UCP in one sentence: Universal Commerce Protocol is an open standard that lets AI agents complete end-to-end purchases across retailers while preserving merchant control, using secure tokenized payments and interoperable APIs.

Here’s what makes this significant: McKinsey projects agentic commerce will reach $3 trillion to $5 trillion globally by 2030. The protocol race is on, with Google, OpenAI, Stripe, and others competing to define how AI-powered shopping will work. If you’re in marketing or e-commerce, this is infrastructure you need to understand.

The Universal Commerce Protocol is an open-source standard that creates a common language for AI agents, retailers, and payment providers to transact together. It covers the entire shopping journey: product discovery, checkout, identity linking, and post-purchase support like order tracking and returns.

Before UCP, building agentic commerce required custom integrations between each AI platform and each retailer. That approach doesn’t scale. As Shopify’s engineering team explains, commerce is too complex and variable for monolithic point-to-point connections. UCP applies the TCP/IP pattern to commerce: layered responsibilities, clear APIs, and composable extensions.

The protocol organizes around three architectural layers:

• Shopping Service: Core transaction primitives including checkout session, line items, totals, messages, and status
• Capabilities: Major functional areas like Checkout, Orders, and Catalog, each independently versioned
• Extensions: Domain-specific schemas added through composition, such as fulfillment options, discounts, and loyalty programs

The practical benefit: implement UCP once and your products become discoverable and purchasable across Google AI Mode, Gemini, and potentially any other AI agent that adopts the standard.

Four research firms have sized agentic commerce independently and landed in the same neighborhood, with McKinsey's $3 trillion to $5 trillion globally by 2030 sitting at the top of the range. Convergence between models built on different assumptions is a stronger signal than any single figure. The behavior underneath is measurable already. People research purchases through AI assistants today, and research is the step that historically precedes buying. None of this describes a new appetite to shop. It is existing demand moving to a surface where the decision gets delegated. For merchants the direction matters more than the size, because a channel this large arrives whether or not you take part in it.

The adoption indicators are already present. According to Adobe’s holiday data, AI-driven traffic to seller sites grew 693% during the 2025 holiday season. Morgan Stanley’s survey found 23% of Americans made a purchase via AI in the past month. Half of US consumers now use AI when searching the internet.

The commercial incentive is clear. Shopping journeys that currently involve multiple tabs, price comparisons, and checkout abandonment will compress into single conversational flows. The protocols that enable this compression will capture significant platform value. Actual attribution will likely undercount early agent-mediated purchases as measurement frameworks catch up to the new channel.

UCP arrived with a coalition attached, which is the main reason to take it seriously. Google co-developed the protocol with five commerce and retail companies rather than publishing it alone, and more than 20 further partners across payments, retail, and technology have endorsed it since. That spread is the point. A commerce standard is worthless unless the card networks, the processors, the platforms, and the stores all agree to speak it, and standards have failed before for want of exactly that agreement. The co-developers cover the hard parts of retail between them: checkout at scale, enterprise store operations, and marketplace supply. The endorsements add the payment rails and enough international reach to make it credible outside the United States.

Co-Developers

Google, Shopify, Walmart, Target, Etsy, and Wayfair worked together to design the protocol. Each brought specific expertise: Google on AI infrastructure and scale, Shopify on checkout complexity across millions of merchants, Walmart and Target on enterprise retail operations, and Etsy and Wayfair on marketplace dynamics.

Shopify’s VP Vanessa Lee stated: “Shopify has a history of building checkouts for millions of unique retail businesses. We have taken everything we’ve seen over the decades to make UCP a robust commerce standard that can scale.”

Endorsements

The endorsement list reads like a directory of major commerce infrastructure:

• Payment Networks: Mastercard, Visa, American Express
• Payment Processors: Stripe, PayPal, Adyen, Worldpay
• Retailers: Best Buy, Home Depot, Macy’s, Kroger, Sephora, Ulta, Gap, Lowe’s, Chewy
• International: Zalando, Flipkart, Carrefour, Shopee, Ant International

Notably, Stripe endorsed UCP despite co-developing the competing Agentic Commerce Protocol with OpenAI. This signals that payment processors see value in supporting multiple standards rather than betting on a single winner.

UCP ships with three capabilities in its first release: Checkout, Identity Linking, and Order Management. They are modular. A merchant can implement one, two, or all three, and they work alone or in combination, so joining the protocol is not a storefront rebuild. Checkout covers the transaction itself. Identity linking covers who the shopper is and what they are entitled to as a returning customer. Order management covers what happens after the money moves. The structure reflects how differently retailers are positioned. A marketplace with a mature checkout and a small business on a hosted platform have different reasons to adopt different pieces, and the protocol lets each choose rather than demanding all of it at once.

Checkout Capability

The checkout capability handles cart management, tax calculations, dynamic pricing, fulfillment options, and payment processing. It uses a state machine model where a checkout progresses through defined statuses: incomplete, ready_for_complete, complete_in_progress, and completed.

A key design decision: checkouts that can’t be completed entirely via API can escalate to human-in-the-loop flows. The protocol includes a requires_escalation status and continue_url field that hands off to a business UI when agent capabilities aren’t sufficient. This typically triggers during high-risk scenarios, such as age-restricted purchases (alcohol, tobacco), when shipping addresses fail AVS (Address Verification Service) checks, or when regulatory constraints require explicit human confirmation.

Identity Linking

Identity linking uses OAuth 2.0 to enable platforms to obtain authorization to perform actions on a user’s behalf. This supports loyalty programs, saved preferences, and repeat purchase flows without exposing credentials.

Order Management

The order capability handles post-purchase lifecycle events through webhooks: shipped, delivered, returned, refunded. This enables AI agents to provide order status updates and manage returns within conversational interfaces.

Transport Options

UCP is transport-agnostic. Businesses can expose capabilities via REST APIs, Model Context Protocol (MCP), or Agent2Agent (A2A) depending on their infrastructure. This flexibility means merchants don’t need to rebuild their stack for each AI platform.

Marketers keep asking which standard to back. For 2026 the answer is both, because the two protocols point at different surfaces rather than at each other. Shoppers are split across assistants, so a retailer present on only one of them is missing from the other. Support is not an either-or purchase in any case. The licenses are compatible, the merchant of record position is unchanged under either, and the integrations touch different parts of the stack. What varies is how much surface each protocol asks you to cover, from checkout alone through to the full journey including identity and post-purchase service. Budget for two implementations and treat the decision as sequencing rather than selection.

UCP isn’t the only agentic commerce standard. OpenAI and Stripe launched the Agentic Commerce Protocol (ACP) in September 2025 to power Instant Checkout in ChatGPT. Both are open-source. Both preserve merchant-of-record status. But they differ in scope and ecosystem.

Competitive Surface Map

The practical reality: major retailers are implementing both. Walmart announced Google Gemini integration via UCP at NRF 2026 while already seeing 20% of referral traffic from ChatGPT. Shopify co-developed UCP while also supporting over 1 million merchants on ChatGPT Instant Checkout via ACP.

The strategic calculus is straightforward: users split across AI platforms, so merchants need presence on multiple surfaces. Protocol interoperability reduces the cost of multi-platform distribution.

Agentic commerce fails commercially unless two questions have hard answers: who authorized this purchase, and who owns the customer afterwards. UCP answers the first with cryptography and the second by contract. Every step from a shopper's stated intent through to the payment is signed, so a disputed transaction traces back to a specific approval rather than becoming an argument. Payment credentials never reach the agent at all. On the second question the protocol is blunt. The retailer stays merchant of record, keeps the customer data, sets its own terms, and can refuse an order exactly as it always could. The agent brokers the sale without ever owning the relationship behind it.

Security is the prerequisite for agentic commerce adoption. UCP addresses this through the Agent Payments Protocol (AP2), which Google developed with input from over 60 organizations including Mastercard, PayPal, Coinbase, and American Express.

AP2 uses cryptographically-signed digital contracts called Mandates to create non-repudiable audit trails from intent to cart to payment. Three mandate types handle different scenarios:

• Intent Mandate: Defines permitted agent behaviors and spending boundaries for delegated tasks
• Cart Mandate: Captures explicit user approval for a specific cart and total
• Payment Mandate: Authorizes the actual payment transaction with cryptographic proof of user consent

Payment information flows through tokenization. The user’s actual payment credentials never pass through the AI agent. Instead, scoped tokens authorize specific merchants for specific amounts, reducing fraud surface and protecting sensitive data.

The merchant control design is explicit in the protocol. Retailers remain merchant of record for all transactions. They retain ownership of customer data, set their own terms and conditions, handle fulfillment and returns, and can reject orders through their existing systems. The AI agent facilitates discovery and checkout but doesn’t intermediate the customer relationship.

For retailers, the practical consequence is that product discovery moves off your site. When a shopper asks an assistant to find and buy something, your category pages and search box never load, and what decides whether you are in the running is how well your product data reads to a machine. That makes catalog quality a growth lever rather than an operations chore. It also opens a channel that behaves unlike the ones you run today, with fewer touchpoints between interest and purchase. None of this is a choice retailers get to make. The shopper picks the interface, and the merchandising decisions you used to control get made somewhere you do not own.

Data Quality Becomes Critical

AI agents can only recommend and transact products they can understand. UCP assumes high-quality, machine-readable product feeds with detailed attributes, accurate inventory, and complete metadata. Merchants with poor catalog hygiene will see reduced visibility and failed orders.

Google announced new Merchant Center data attributes specifically for conversational commerce: answers to common product questions, compatible accessories, substitutes, and rich media. These attributes complement traditional keywords with the semantic context AI agents need.

Channel Strategy Expands

Agentic commerce creates a new channel that sits alongside website, app, and marketplace. It requires decisions about where to enable AI checkout, what promotions to offer through agent surfaces, and how to handle the reduced touchpoints between discovery and purchase.

As Crone Consulting CEO Richard Crone noted, merchants face a tradeoff: increased discoverability versus reduced control over the last touchpoint. The product detail page and checkout experience have historically been opportunities for cross-sell and upsell. Agent-mediated checkout compresses that funnel.

Early Movers Have Advantage

Behavior shifts that took over ten years during the desktop-to-mobile transition are happening in 12 to 24 months with AI. Retailers establishing protocol presence in H1 2026 will capture traffic before the holiday rush forces mass adoption. The window for differentiation is narrow.

What Changes in 2026 vs 2024

In 2024, AI shopping assistants were demos and experiments. In 2026, they’re infrastructure with payment rails. The shift from “AI can search for products” to “AI can complete purchases” fundamentally changes the unit economics of customer acquisition. Brands that optimized for click-through are now competing for agent-selection.

What breaks if you ignore this for 12 months: your competitors establish preferred merchant status with AI platforms while you’re still debating strategy. Agent recommendation algorithms develop preferences based on early integration quality. Your product data gaps become visible as competitors with clean feeds capture the agent-mediated demand you could have served.

What to do now: Audit your product data quality for AI readability. Evaluate both UCP and ACP integration paths. Instrument your analytics to track agent-originated traffic separately from direct channels. Build internal expertise on agentic commerce before it becomes table stakes.

From a marketing systems perspective, UCP matters less as a Google product and more as the first credible attempt to standardize agent-mediated demand. The protocol itself is less important than what it represents: the formalization of AI agents as a commerce channel with its own infrastructure, measurement, and competitive dynamics.