Search results

[Proposal]: Add seller.logo to the catalog variant schema

Status: Open.

#674 In Universal-Commerce-Protocol/ucp;

· XiaolongZhang-TT opened on Aug 3, 2026

[Bug]: Incorrect usage of "Authorization" header in OpenAPI 3.1.0

bugSomething isn't workingSomething isn't working

Status: Open.

#668 In Universal-Commerce-Protocol/ucp;

· jingyli opened on Aug 1, 2026

Delegated-IdP accelerated flow: two trust-chain gaps (unauthenticated platform at the token endpoint, and no trust anchor for auth_url)

Status: Open.

#667 In Universal-Commerce-Protocol/ucp;

· vishkaty opened on Jul 31, 2026

Permalink can attach state changes to an authenticated buyer session on an unauthenticated GET: what protects against CSRF?

Status: Open.

#666 In Universal-Commerce-Protocol/ucp;

· vishkaty opened on Jul 31, 2026

Extension-defined Actions: empty actions map passes schema despite the MUST-omit rule; A2A binding missing the complete_in_progress freeze

Status: Open.

#665 In Universal-Commerce-Protocol/ucp;

· vishkaty opened on Jul 31, 2026

Idempotency payload-matching by raw-body SHA-256 is unworkable over MCP (JSON-RPC envelope varies per request)

Status: Open.

#664 In Universal-Commerce-Protocol/ucp;

· vishkaty opened on Jul 31, 2026

[Feat]: AP2 Mandates: Use platform UCP profile URL as the iss claim for key discovery

Status: Open.

#652 In Universal-Commerce-Protocol/ucp;

· yunlong-song-awx opened on Jul 30, 2026

[Proposal]: Add an optional human-readable display_value to money objects

Status: Open.

#650 In Universal-Commerce-Protocol/ucp;

· namansoood opened on Jul 29, 2026

[Bug]: OpenAPI schema still exposes checkout.id in update_checkout request body

Status: Open.

#649 In Universal-Commerce-Protocol/ucp;

· damaz91 opened on Jul 29, 2026

[Proposal]: Out-of-session payment settlement — order-level actions + order.payment_status

Status: Open.

#641 In Universal-Commerce-Protocol/ucp;

· gforgab opened on Jul 27, 2026

[Bug]: Request-Signature marked required in 2026-01-23 shopping spec contradicts signatures.md

Status: Open.

#636 In Universal-Commerce-Protocol/ucp;

· sbeashwar opened on Jul 24, 2026

RFC: Expanding Well-Known Signals for Agent-Originated Commerce

Status: Open.

#630 In Universal-Commerce-Protocol/ucp;

· prasad-stripe opened on Jul 23, 2026