generated: '2026-09-13'
method: probed
source: >-
  https://shop.fruitist.com/.well-known/ucp (200),
  https://shop.fruitist.com/.well-known/openid-configuration (200),
  https://shop.fruitist.com/api/ucp/mcp tools/list (200)
aid: agrovision-ucp-commerce
summary: >-
  One domain standard is declared by the contract itself: Universal Commerce Protocol, version
  2026-08-25, with its capability URIs enumerated in the store's own /.well-known/ucp merchant
  profile. OIDC and OAuth 2.0 conformance is asserted by the Shopify customer-account discovery
  document served on the same host. Nothing else is claimed.
conformance:
- id: ucp
  name: Universal Commerce Protocol
  version: '2026-08-25'
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: >-
    The merchant profile declares ucp.version 2026-08-25 plus two prior supported versions, and
    binds service dev.ucp.shopping to transport mcp.
- id: ucp.shopping.catalog.search
  name: UCP Shopping — Catalog Search
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: Declared capability dev.ucp.shopping.catalog.search; backed by the search_catalog tool.
- id: ucp.shopping.catalog.lookup
  name: UCP Shopping — Catalog Lookup
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: Declared capability dev.ucp.shopping.catalog.lookup; backed by lookup_catalog / get_product.
- id: ucp.shopping.cart
  name: UCP Shopping — Cart
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: Declared capability dev.ucp.shopping.cart; backed by create_cart/get_cart/update_cart/cancel_cart.
- id: ucp.shopping.checkout
  name: UCP Shopping — Checkout
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: >-
    Declared capability dev.ucp.shopping.checkout; backed by
    create_checkout/get_checkout/update_checkout/complete_checkout/cancel_checkout.
- id: ucp.shopping.order
  name: UCP Shopping — Order
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: Declared capability dev.ucp.shopping.order; backed by get_order.
- id: ucp.shopping.fulfillment
  name: UCP Shopping — Fulfillment extension
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: >-
    Declared with config method_combinations [["shipping"]] and multi_destination [] — shipping
    only, single destination.
- id: ucp.shopping.discount
  name: UCP Shopping — Discount extension
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
- id: shopify.catalog
  name: Shopify Storefront Catalog extension
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/ucp
  detail: Vendor extension dev.shopify.catalog extending the UCP catalog capabilities.
- id: mcp
  name: Model Context Protocol
  conforms: true
  evidence: https://shop.fruitist.com/api/ucp/mcp
  detail: JSON-RPC 2.0 tools/list answered 200 with 13 tools carrying JSON Schema 2020-12 inputSchemas.
- id: json-schema-2020-12
  name: JSON Schema 2020-12
  conforms: true
  evidence: mcp/agrovision-ucp-mcp-tools.json
  detail: Every tool inputSchema declares $schema https://json-schema.org/draft/2020-12/schema.
- id: oidc
  name: OpenID Connect Discovery 1.0
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/openid-configuration
  detail: >-
    Served on Agrovision's storefront host; issuer is Shopify's tenant authorization server
    (https://shopify.com/authentication/64996540577), not one Agrovision operates.
- id: oauth2
  name: OAuth 2.0 Authorization Server Metadata (RFC 8414)
  conforms: true
  evidence: https://shop.fruitist.com/.well-known/oauth-authorization-server
  detail: Authorization code with PKCE S256; same Shopify-operated issuer.
- id: iso-4217
  name: ISO 4217 currency codes
  conforms: true
  evidence: mcp/agrovision-ucp-mcp-tools.json
  detail: Money is expressed as integer minor units paired with an ISO 4217 code.
- id: rfc9457
  name: RFC 9457 Problem Details
  conforms: false
  evidence: https://shop.fruitist.com/api/ucp/mcp
  detail: Errors are JSON-RPC 2.0 error objects; application/problem+json is not used.
- id: fhir
  conforms: false
  evidence: not applicable to this sector
- id: scim
  conforms: false
  evidence: not applicable
- id: odata
  conforms: false
  evidence: not applicable
domain_standard:
  id: ucp
  name: Universal Commerce Protocol 2026-08-25
  market: retail / direct-to-consumer commerce
  declared_in_contract: true
  signature: >-
    The store's own /.well-known/ucp names service "dev.ucp.shopping" with transport "mcp" and
    enumerates capability URIs under the dev.ucp.shopping.* namespace, and the live MCP endpoint
    returns the standard's canonical tool names (search_catalog, create_cart, create_checkout,
    complete_checkout, get_order). A buyer-side agent that already speaks UCP integrates with
    this store with no bespoke connector.
  evidence: https://shop.fruitist.com/.well-known/ucp
  authored_by: Shopify (platform implementation) on a host Agrovision controls
certifications:
  published: false
  page: https://www.fruitist.com/certifications
  status: 200
  detail: >-
    The page states the company has earned "numerous top-tier certifications" and renders about
    nineteen certification logos, but names none of them in text and supplies no alt attributes
    and no certificate documents — so nothing machine-readable, and no named scheme could be
    recorded. No Compliance pointer was emitted for that reason. Food-safety and social-audit
    certificates, not security certifications, are what this page is about; no SOC 2, ISO 27001,
    PCI or HIPAA programme is published anywhere.