generated: '2026-08-30'
method: probed
source: >-
  POST https://shop.truff.com/api/ucp/mcp {"jsonrpc":"2.0","id":1,"method":"tools/list"} —
  HTTP 200, application/json, 13 tools with full JSON Schema 2020-12 inputSchemas, returned
  unauthenticated on 2026-08-30. Discovered via https://shop.truff.com/llms.txt and confirmed
  against https://shop.truff.com/.well-known/ucp.
name: TRUFF Store — UCP Shopping MCP
description: >-
  A live, unauthenticated Model Context Protocol endpoint on TRUFF's own storefront host that
  exposes the store's catalog, cart, checkout and order surface to agents. It is the Shopify
  platform's native Universal Commerce Protocol (UCP) shopping service — TRUFF did not author
  the tool schemas — but the endpoint is served from a TRUFF-controlled host, the UCP merchant
  profile names TRUFF as the merchant (merchant_origin shop.truff.com, Shopify shop id
  21822603), and every tool operates on TRUFF's own catalog and carts. Recorded as a real
  agent surface with platform-provided provenance.
status: live
ownership: >-
  Platform-provided, merchant-scoped. Shopify emits the UCP/MCP implementation for every store
  on the platform; the endpoint, the merchant identity and the data behind it are TRUFF's.
  This is the templated/self-hosted case, not a sibling-product misattribution — the profile
  at /.well-known/ucp names merchant "TRUFF" and no other brand.
deployment:
  mode: remote
  endpoint: https://shop.truff.com/api/ucp/mcp
  alternate_endpoint: https://truff-hot-sauce.myshopify.com/api/ucp/mcp
  install: ''
  package: ''
  auth: none
  verified: probed
  note: >-
    llms.txt advertises https://shop.truff.com/api/ucp/mcp; the UCP merchant profile advertises
    the canonical myshopify host https://truff-hot-sauce.myshopify.com/api/ucp/mcp. Both are
    TRUFF-controlled. The shop.truff.com form was the one actually probed and it answered 200.
transport: http
protocol:
  name: Universal Commerce Protocol
  spec: https://ucp.dev
  version: '2026-08-25'
  supported_versions:
  - '2026-08-25'
  - '2026-04-08'
  - '2026-01-23'
  service: dev.ucp.shopping
  schema: https://ucp.dev/2026-08-25/services/shopping/mcp.openrpc.json
discovery:
- url: https://shop.truff.com/llms.txt
  status: 200
- url: https://shop.truff.com/agents.md
  status: 200
- url: https://shop.truff.com/.well-known/ucp
  status: 200
- url: https://www.truff.com/.well-known/ucp
  status: 200
tools_file: truff-mcp-tools.json
tool_count: 13
tools:
- name: search_catalog
  category: catalog
  description: Search for products from the online store.
  write: false
- name: lookup_catalog
  category: catalog
  description: Look up multiple products or variants by identifier.
  write: false
- name: get_product
  category: catalog
  description: Retrieve complete product detail by identifier.
  write: false
- name: create_cart
  category: cart
  description: Creates a new cart.
  write: true
- name: get_cart
  category: cart
  description: Get the cart contents.
  write: false
- name: update_cart
  category: cart
  description: Perform updates to a cart.
  write: true
- name: cancel_cart
  category: cart
  description: Cancels a cart.
  write: true
  reverses: create_cart
- name: create_checkout
  category: checkout
  description: Creates a checkout; returns line items, totals, discounts and taxes.
  write: true
- name: get_checkout
  category: checkout
  description: Returns details about the checkout.
  write: false
- name: update_checkout
  category: checkout
  description: Updates a checkout (shipping address, method, buyer details).
  write: true
- name: complete_checkout
  category: checkout
  description: >-
    Completes a checkout and returns the order id and Thank You Page URL. Requires
    meta.idempotency-key. Buyer approval is required before payment.
  write: true
  idempotent: true
  idempotency_field: meta.idempotency-key
- name: cancel_checkout
  category: checkout
  description: Cancels a checkout.
  write: true
  reverses: create_checkout
- name: get_order
  category: order
  description: Get the details of an order.
  write: false
capabilities:
- dev.ucp.shopping.catalog.search
- dev.ucp.shopping.catalog.lookup
- dev.ucp.shopping.cart
- dev.ucp.shopping.checkout
- dev.ucp.shopping.fulfillment
- dev.ucp.shopping.discount
- dev.ucp.shopping.order
- dev.shopify.catalog
payment_handlers:
- id: gpay
  handler: com.google.pay
  merchant_name: TRUFF
  merchant_origin: shop.truff.com
- id: shopify.card
  handler: dev.shopify.card
  card_brands: [visa, master, american_express, discover, diners_club]
- id: shop_pay
  handler: dev.shopify.shop_pay
guardrails:
- >-
  Checkout requires contemporaneous human approval. The published agent instructions state an
  agent must not complete payment without explicit buyer consent.
- The MCP endpoint is rate-limited per IP; back off on 429.
- >-
  Every tool requires meta.ucp-agent.profile — a URI identifying the calling agent — so calls
  are attributable.
x-evidence:
  fetched: '2026-08-30'
  url: https://shop.truff.com/api/ucp/mcp
  method: POST
  http_status: 200
  content_type: application/json; charset=utf-8
  auth_required: false
  response_bytes: 52135