Google Universal Commerce Protocol: Multi-Item Carts
Google's Universal Commerce Protocol expands with multi-item cart support and real-time catalog queries for AI shopping agents. Merchant guide.
Global Partners
Item Cart Support
Catalog Queries
Standard Protocol
Key Takeaways
Google's Universal Commerce Protocol has been one of the most significant infrastructure bets in the agentic commerce space since its initial publication. The core idea is straightforward: define a standard API contract that lets any AI shopping agent interact with any merchant system. The March 2026 expansion changes the ambition of that contract substantially, adding multi-item cart support and real-time catalog query capabilities that were absent from the original specification.
For merchants, this expansion is both an opportunity and a competitive pressure point. AI-assisted shopping is growing rapidly — Google AI Overviews now appear in a rising share of product queries, and early data suggests consumers do convert when agents surface product recommendations at decision moments. Merchants with UCP implementations get preferential access to that traffic. Those without one will increasingly find that AI agents route around non-compliant product data. Our eCommerce solutions team has been tracking UCP since the initial release and working with clients on implementation readiness. This guide covers everything merchants need to understand about the March 2026 expansion.
What Is Google Universal Commerce Protocol
Google Universal Commerce Protocol (UCP) is an open API specification that defines the communication layer between AI shopping agents and merchant commerce systems. Where traditional e-commerce integrations are built point-to-point — a merchant integrates with each platform separately — UCP establishes a single standard that any compliant AI agent can use to discover products, verify availability, build orders, and initiate checkout.
The protocol emerged from a recognition within Google that the transition to agentic shopping would break the existing web-scraping and product feed model. AI agents need structured, queryable data in real time. Static feeds updated once per day cannot support a shopping agent deciding whether to buy a product right now at the current price with current stock levels. UCP was designed to bridge that gap.
UCP is a publicly available specification, not a Google-proprietary API. Any merchant, platform, or AI agent developer can implement it. The spec is developed collaboratively with over 20 industry partners.
Designed specifically for AI agent consumption, not human browsing. Structured JSON responses, predictable error handling, and explicit intent signals make UCP endpoints easy for agents to parse and act on.
Unlike browse-only product APIs, UCP includes checkout session management and payment initiation flows co-developed with Visa, Mastercard, and Stripe as founding partners.
The original UCP focused on single-product discovery and checkout. Merchants could expose a product catalog endpoint and a checkout endpoint, and AI agents could find products and purchase one at a time. That foundation proved the model but immediately revealed the limitation: real shopping trips almost always involve multiple items. The March 2026 expansion addresses that gap directly.
Multi-Item Cart Support Explained
The core addition in the March 2026 UCP expansion is the cart session object: a persistent, stateful representation of a consumer's intended purchase that an AI agent builds incrementally before handing off to checkout. Where the original protocol treated each product interaction as a discrete event, the new cart session allows an agent to add items, modify quantities, apply discount codes, and review the full order before initiating payment.
This changes the practical capability of AI shopping agents dramatically. A Gemini-powered shopping assistant can now accept a consumer request like "build me a home office setup under $2,000" and construct a multi-item cart across monitor, keyboard, mouse, desk accessories, and cable management products — checking inventory and pricing for each item in real time, applying relevant promotions, and presenting the complete order for consumer approval before checkout.
Session Creation
Agent calls cart/create with consumer identity token and shopping intent. Merchant returns session ID and cart state.
Item Addition
Agent calls cart/add-item for each product, including GTIN, quantity, and selected variant. Real-time availability check occurs on each add.
Cart Review
Agent calls cart/get to retrieve current state including totals, estimated shipping, available promotions, and out-of-stock warnings.
Consumer Confirmation
Agent presents cart summary to consumer for approval. Consumer can modify quantities or remove items before proceeding.
Checkout Handoff
Agent calls cart/checkout with approved cart and consumer payment token. Merchant processes payment and returns order confirmation.
The cart session object includes explicit conflict resolution mechanics for situations where items become unavailable or prices change between initial query and checkout. The protocol defines three resolution strategies: block (prevent checkout until the consumer acknowledges the change), substitute (offer an alternative product), and remove (drop the unavailable item with notification). Merchants can configure which strategy applies to different product categories, giving them control over the checkout experience even when an AI agent is driving it.
Cart session TTL: UCP cart sessions expire after 30 minutes of inactivity by default, configurable up to 24 hours for merchants with longer consideration cycles. Merchants should design their UCP implementation to handle session expiry gracefully and restore cart state when consumers return.
Real-Time Catalog Queries and Product Feeds
Alongside multi-item cart support, the March 2026 UCP update introduced the catalog query layer: a set of API endpoints that allow AI agents to query merchant product data in real time rather than relying on batch-updated product feeds. This is a fundamental architectural shift in how AI agents access merchant inventory.
Traditional product feeds — whether Google Merchant Center uploads, XML sitemaps, or JSON-LD markup — are batch documents. A merchant uploads a feed file, and Google indexes it. The index reflects product data as it existed when the feed was generated, which may be hours or days old. For static products with stable pricing, this works adequately. For merchants with dynamic inventory, frequent price changes, or flash sales, stale feed data is a persistent problem that leads to consumer disappointment and failed conversions.
- ✗Batch refresh (hourly to daily lag)
- ✗Stale inventory and pricing data
- ✗No session context or intent signals
- ✗Cannot handle dynamic promotions
- ✗Agents may surface out-of-stock items
- Live inventory at time of query
- Current pricing including flash sales
- Session-aware promotions and bundles
- Variant availability per size/color
- Estimated delivery times per location
The catalog query endpoints support three main query types: product lookup by GTIN or merchant SKU, category search with filtering parameters, and availability check for a specific product-variant-quantity combination. Merchants expose these endpoints and UCP handles the authentication, rate limiting, and response caching on the protocol layer. The performance requirement is sub-500ms response time at the 95th percentile, which means merchants need to optimize their catalog API for this latency target.
20+ Global Partners and the Open Standard
One of the most significant aspects of UCP that distinguishes it from Google's previous commerce initiatives is the breadth of the partner ecosystem that co-developed the specification. Previous Google commerce tools were largely Google-designed with external adoption expected after the fact. UCP was developed with active input from Visa, Mastercard, Stripe, and Shopify from the beginning, plus more than fifteen additional global partners across payment processing, logistics, and commerce platforms.
Payment Networks
- Visa — tokenized payment credentials
- Mastercard — secure element integration
- Stripe — developer-first checkout APIs
- American Express — premium card flows
Commerce Platforms
- Shopify — merchant implementation layer
- WooCommerce — WordPress ecosystem
- BigCommerce — enterprise commerce
- Magento/Adobe Commerce — enterprise
Logistics & Fulfillment
- UPS — delivery time estimates
- FedEx — shipping cost calculations
- ShipBob — fulfillment data
- Flexport — cross-border commerce
Identity & Trust
- Google Identity — consumer auth
- Apple Pay — device-based payments
- PayPal — wallet integration
- Plaid — bank account verification
The multi-stakeholder development model means UCP is genuinely portable across the ecosystem rather than a Trojan horse for Google Lock-in. Merchants implementing UCP gain access to AI agents powered by Gemini, but also to any third-party AI shopping assistant that implements the public specification. This is the same network effect logic that made HTTP successful: a universal standard benefits every participant more than any proprietary alternative. For context on how this fits within the broader evolution of agentic commerce protocols, UCP and ACP are complementary rather than competing, with UCP stronger on Google-native shopping surfaces and ACP covering broader multi-agent orchestration scenarios.
Merchant Implementation Guide
UCP implementation has three layers: product data quality, API endpoint creation, and authentication setup. Merchants who already run well-maintained Google Merchant Center feeds are starting from a better position than those without, but all merchants need to add the API layer on top of their existing product data infrastructure.
Phase 1: Product Data Foundation
- Assign GTINs to all products
- Implement Google product category taxonomy
- Add variant attributes (size, color, material)
- Maintain high-quality images meeting spec requirements
Phase 2: API Endpoints
- Build
/catalog/productlookup endpoint - Build
/catalog/searchquery endpoint - Build
/catalog/availabilitycheck endpoint - Implement cart session CRUD endpoints
- Build checkout initiation and confirmation endpoints
Phase 3: Authentication and Verification
- Register in Google Merchant Center as UCP partner
- Configure OAuth 2.0 for agent authentication
- Implement payment token handling for Visa/MC/Stripe
- Pass UCP compliance test suite
Platform-hosted merchants on Shopify have the most straightforward path: Shopify is building native UCP support into its platform as an official partner. Custom platform merchants face more work but have the advantage of full control over their implementation. Mid-market merchants on platforms like WooCommerce or BigCommerce should watch for official plugins from those platforms before committing to a custom build. For a detailed look at how Shopify's agentic commerce and UCP implementation is coming together, that post covers the Shopify-specific technical path in depth.
How AI Agents Use UCP Shopping Flows
Understanding how AI agents actually traverse UCP endpoints helps merchants design their implementations for real-world traffic patterns. Google's Gemini-powered shopping agent follows a structured decision loop that UCP is designed to support efficiently.
Intent Parsing
The agent receives a shopping intent from the consumer: 'find me a running shoe under $150, size 11, for road running.' It extracts structured attributes (category, price range, size, use case) for catalog queries.
Catalog Discovery
The agent queries UCP catalog/search endpoints across registered merchants, filtering by category, price, and availability. Each merchant responds with matching products and real-time inventory confirmation.
Comparison and Selection
The agent presents the consumer with a ranked shortlist based on relevance, price, ratings, and merchant trust signals. Consumer indicates preference or asks for alternatives.
Cart Construction
For multi-item purchases, the agent builds a cart session incrementally. Each add-item call confirms availability and updates the running total. The agent can suggest complementary products from the same or other merchants.
Checkout Execution
With consumer confirmation, the agent initiates checkout using the stored payment token from the consumer's Google Wallet or linked payment method. The merchant processes the payment and returns an order confirmation.
Payment Security and Compliance
Payment security in an agentic commerce context introduces requirements beyond standard e-commerce PCI-DSS compliance. When an AI agent is initiating a purchase on behalf of a consumer, the authentication chain must prove not only that the consumer authorized the purchase but that the agent is operating within the consumer's explicitly granted permissions. UCP addresses this through a layered authorization model.
Consumer Identity
Google Identity token proves consumer authentication. Tied to the consumer's Google account with device-level verification.
Agent Authorization
OAuth 2.0 token scoped to specific shopping permissions. Consumer must explicitly grant the agent the right to make purchases on their behalf.
Spending Controls
Consumer can set per-transaction limits, merchant category restrictions, and require confirmation above threshold amounts.
Payment Tokenization
Visa/Mastercard/Stripe tokens replace raw card numbers in UCP flows. Merchants never receive actual payment credentials — only tokenized references.
Audit Trail
Every UCP transaction generates a complete audit log accessible to the consumer. Agents cannot make purchases outside the logged event stream.
PCI-DSS compliance: Merchants implementing UCP checkout endpoints must maintain PCI-DSS compliance for their payment processing infrastructure. UCP's payment tokenization reduces the scope of PCI compliance by preventing raw card data from reaching merchant systems, but merchants must still meet applicable standards for the tokenized transaction flow.
Strategic Implications for Merchants
UCP is infrastructure-layer work with significant competitive implications. Merchants who implement UCP early will have their products discoverable by AI shopping agents as those agents gain consumer adoption. Merchants who wait will face a harder catch-up problem as agent traffic concentrates among compliant merchants.
The competitive dynamics are particularly acute for high-consideration purchases where consumers benefit most from AI assistance — home electronics, apparel, furniture, sporting goods. These are categories where an AI agent's ability to query across merchants, compare specifications, and build complete carts provides genuine consumer value. Early UCP adopters in these categories will see the highest incremental traffic from agentic shopping surfaces. For a full assessment of how our team approaches eCommerce strategy including emerging protocol adoption, we work with clients on both the technical implementation and the go-to-market positioning of new commerce capabilities.
- High-consideration product categories
- Strong existing Google Shopping presence
- Dynamic inventory or pricing
- Shopify or official partner platform
- Significant US market focus
- Commodity products with low AI search intent
- Primarily repeat/subscription purchases
- Complex custom configuration requirements
- Non-US primary market
- Current Merchant Center data quality issues
Current Limitations and Roadmap
UCP is a significant advance in agentic commerce infrastructure, but it carries real constraints that merchants should understand before committing resources to implementation. The protocol is still evolving, the consumer-facing AI surfaces are in limited rollout, and the engineering investment is non-trivial.
Geographic availability: UCP and the Gemini shopping agent surfaces are initially available in the United States with select EU markets to follow. Merchants with primarily non-US audiences should wait for their market availability before prioritizing implementation.
Consumer adoption curve: AI-assisted shopping is growing but not yet mainstream for the majority of consumers. The current UCP traffic is meaningful but not yet the dominant acquisition channel for most merchants. Implementation ROI depends heavily on category and consumer demographics.
Latency requirements are strict: The sub-500ms catalog query requirement is demanding for merchants with legacy backend systems or database bottlenecks. Merchants with slow inventory APIs may need infrastructure upgrades before UCP implementation delivers a good consumer experience.
Multi-merchant cart limitations: The March 2026 expansion supports multi-item carts within a single merchant. Cross-merchant carts — buying products from multiple retailers in a single checkout session — are on the roadmap but not yet in the specification.
Subscription and recurring orders: UCP currently covers one-time purchase flows. Subscription commerce, auto-replenishment, and recurring order patterns are identified as v2 features with no confirmed timeline.
Related Articles
Continue exploring with these related guides