Curated index of open-source plugins, libraries, and reference implementations for agentic commerce — the layer where AI agents (ChatGPT, Claude, Gemini, custom) interact with merchant storefronts on behalf of human buyers.
Covers the active protocols (ACP, UCP, AP2), the discovery standards (llms.txt, A2A agent-card, schema.org JSON-LD), the payment rails (MPP, x402, cards, stablecoins), and the per-platform integrations that tie them together.
Maintained by xpay✦. PRs welcome.
- Protocols
- Per-platform plugins
- Reference implementations & SDKs
- Payment rails for agents
- Discovery standards
- Conformance & tooling
- Related curated lists
| Protocol | Spec | Sponsor | Surface |
|---|---|---|---|
| ACP — Agentic Commerce Protocol | agentic-commerce-protocol/agentic-commerce-protocol | OpenAI · Stripe · Meta (TSC) | Cart, checkout, delegated payment, discounts, fulfillment |
| UCP — Universal Commerce Protocol | Universal-Commerce-Protocol/ucp | Tech Council + Governance Council (vendor-neutral) | Cart, checkout, order, catalog, refunds, disputes — RFC 9421 signed requests, MCP/A2A bindings |
| AP2 — Agent Payments Protocol | google-agentic-commerce/AP2 | Signed mandates, A2A transport | |
| Forter's TACP — Trusted Agentic Commerce | forter/trusted-agentic-commerce-protocol | Forter | Parallel agent-authentication / trust-signal overlay (JWS+JWE, JWKS, fraud-signal envelopes). Not a fork of ACP; orthogonal to the cart/checkout surface. |
Side-by-side technical comparison: ACP vs UCP vs AP2.
Each row: which protocols it speaks, license, and link.
- xpaysh/agentic-commerce-for-woocommerce — v0.2.x (PHP reference). ACP + UCP + AP2. WordPress plugin. GPLv2.
- xpaysh/agentic-commerce-for-commercetools — v0.2.1. TS reference. ACP + UCP + AP2. RFC 9421 signature verification middleware on
/ucp/*+/acp/*(env-gated).
- xpaysh/agentic-commerce-for-bigcommerce — v0.2.1. ACP + UCP + AP2. BigCommerce App via App Marketplace.
- xpaysh/agentic-commerce-for-magento — v0.2.1. ACP + UCP + AP2. Consolidates two unmaintained upstream ACP modules (28★, 13★) onto multi-protocol coverage.
- Shopify/Shopify-AI-Toolkit (name approximate) — official Shopify AI/UCP path. Vendor-maintained.
- xpaysh/agentic-commerce-for-shopify — v0.2.1. ACP + UCP + AP2. Shopify App composing with Shopify's UCP-native flow (composes, doesn't compete). App Store packaging in a follow-on private repo.
- xpaysh/agentic-commerce-for-salesforce-commerce — v0.2.1. ACP + UCP + AP2. B2C Commerce cartridge + PWA Kit extension.
- saleor/saleor-mcp — official Saleor MCP server (the MCP transport binding).
- xpaysh/agentic-commerce-for-saleor — v0.2.1. ACP + UCP + AP2 protocol layer; composes with saleor-mcp, doesn't replace it.
- xpaysh/agentic-commerce-for-prestashop — v0.2.1. ACP + UCP + AP2. PrestaShop module; strongest EU-regional presence in the family.
Template-based, community-contributed. See CONTRIBUTING.md for the walkthrough, BOUNTIES.md for reward amounts on accepted plugins, and xpaysh/agentic-commerce-plugin-template for the starter kit.
- vercel/acp-handler — generic Next.js handler for ACP. Platform-agnostic.
- NVIDIA-AI-Blueprints/Retail-Agentic-Commerce — NVIDIA blueprint covering ACP + UCP.
- Universal-Commerce-Protocol/js-sdk — official UCP TypeScript SDK with RFC 9421 verifier.
- Universal-Commerce-Protocol/python-sdk — official UCP Python SDK.
- Universal-Commerce-Protocol/ucp-schema — Rust validator.
- xpaysh/agentic-commerce-plugin-template — TypeScript monorepo template for new per-platform plugins. Publishes the
@xpaysh/*package family below.
| Package | What it ships |
|---|---|
@xpaysh/acp-schemas |
Real ACP JSON Schemas vendored from upstream spec/2026-04-17. 7 bundles, 140 type defs. |
@xpaysh/ucp-schemas |
83 UCP schemas vendored from Universal-Commerce-Protocol/ucp source. generateUcpProfile() + registerForValidation(ajv). |
@xpaysh/ap2-schemas |
AP2 namespace (SPEC_VERSION='draft' while upstream is pre-stable). |
@xpaysh/adapter-contract |
The PlatformAdapter TS interface every per-platform plugin implements. |
@xpaysh/template-adapter |
Working reference PlatformAdapter backed by a deterministic in-memory catalog — copy as the starting point for a new plugin. |
@xpaysh/discovery |
Pure-function generators for /llms.txt, schema.org JSON-LD, robots.txt, A2A agent-card.json, RFC 9728. Zero deps. |
@xpaysh/cart-deeplinks |
HS256-signed JWT cart-handoff URLs. |
@xpaysh/storefront-audit |
Discovery-layer auditor + ac-doctor CLI; rejects fictitious well-known URIs. |
@xpaysh/http-message-signatures |
RFC 9421 sign/verify; ed25519 + hmac-sha256; targets the component set UCP REST uses. |
@xpaysh/conformance-fixtures |
Golden ACP + UCP request/response payloads; every fixture cross-validates against the canonical schemas via Ajv. |
@xpaysh/acp-session-store |
ACP checkout-session storage: InMemorySessionStore + DynamoDBSessionStore behind a single interface. |
@xpaysh/lint-wellknowns |
CI linter + GitHub Action that fails builds emitting fictitious well-known URIs. |
These sit below the commerce protocols. Any commerce protocol can plug into any rail.
- Stripe MPP — Machine Payments Protocol. Cards, stablecoins, fiat acceptance.
- x402 — HTTP 402 payment rail. Stablecoin settlement.
- Cards — Stripe, Adyen, Braintree, etc.
- Stablecoin direct — Bridge, Tempo, Privy.
Real, externally-verifiable standards (no invented well-known URIs):
- llmstxt.org —
/llms.txt, Markdown, LLM-readable site map. Use this. - a2a-protocol.org —
/.well-known/agent-card.json(A2A 1.0, IANA-registered 2025-08-01). - schema.org — JSON-LD
Product,Offer,AggregateOffer,BreadcrumbList. - RFC 9309 —
robots.txt. Real AI user-agents to allowlist or block:GPTBot,ClaudeBot,Google-Extended,PerplexityBot,CCBot,Amazonbot. - RFC 9728 —
/.well-known/oauth-protected-resourcefor agent OAuth. - UCP business profile / Google's UCP guide —
/.well-known/ucp(no extension). Spec status:draftupstream; the on-the-wireversionfield is a YYYY-MM-DD date (e.g.2026-05-18). The capability-negotiation entry point that Google + Shopify + Etsy + Wayfair + Target + Walmart fetch.
/.well-known/agentic-commerce.json, /.well-known/ucp.json (the real UCP profile path is /.well-known/ucp — no extension), /.well-known/acp.json, /.well-known/ap2.json, /.well-known/mcp.json, /.well-known/ai-plugin.json (deprecated), /agents.txt, /ai.txt — none of these are in any active spec. If you see a plugin emitting one of these, please open an issue.
- Universal-Commerce-Protocol/conformance — UCP conformance suite.
- Universal-Commerce-Protocol/samples — sample agents & merchants.
- Awesome MCP Servers — sister ecosystem; many entries are MCP servers exposed by commerce platforms.
- xpaysh/awesome-agentic-economy — broader: agentic-economy resources (monetization, identity, payment).
- Awesome x402 — x402-specific resources.
This list aims for signal over volume. Two ways in:
- Add an existing plugin or library — open a PR adding your repo to the relevant section. Acceptance criteria + sort rules in
CONTRIBUTING.md. - Build a new per-platform plugin — bounties pay $100–500 per accepted plugin. Tiers, eligibility, and process in
BOUNTIES.md. Starter kit:xpaysh/agentic-commerce-plugin-template.
CC0 1.0 Universal — public domain dedication. Use this list freely.