UCP

v0.1.2API Key

Universal Commerce Protocol by Google. Agentic shopping: product search, cart, checkout, order tracking, and delivery.

20 tools1 env vars🌐 GLOBALstable on npm

Install

terminal

$ npm install @codespar/mcp-ucp

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "ucp": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-ucp"
      ],
      "env": {
        "UCP_API_KEY": "<your_ucp_api_key>"
      }
    }
  }
}

After restart, your agent can call any of the 20 tools below — try search_products first.

Environment variables · 1

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

UCP_API_KEY

requiredsecret

API key for ucp

Available tools · 20

Each tool is independent — your agent loads only what it needs to reduce context and response time.

READsearch_products

Search merchant product catalog. Supports text query, category filters, price range, and sorting.

READget_product

Get detailed product information including pricing, variants, availability, and reviews

READcheck_availability

Check product stock and delivery availability for a specific location

READlist_merchants

List UCP-compatible merchants with optional category and region filters

WRITEcreate_cart

Create a new shopping cart for a merchant

WRITEadd_to_cart

Add an item to the shopping cart

DELETEremove_from_cart

Remove an item from the shopping cart

READget_cart

Get cart contents, item totals, taxes, and shipping estimates

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.