This is a test store that anyone's AI agent can shop. These figures come from the store's own request log for the last 30 days. They are shares and timings only: no agent is named unless it proved who it is, and no search text is shown.
Of every session that wasn't a browser. An agent can name itself with a UCP profile or a bot user agent; it proves it by signing its requests with keys it publishes.
Browsers are counted on their own in the grid: a browser rarely says what it is. How we decide each level
Share of all requests, by door and by how much the sender proved. Darker means more. Discovery files are counted inside the door they were read from. Crawler addresses are checked from 3 Nov 2026; crawlers before that count as declared.
| Door | Verifiedsignature checked out | IP-checkedcrawler from its operator's ranges | Declared, unprovennamed itself, no valid signature | Browserperson or agent: owner console | Scriptcurl, python, no user agent | All |
|---|---|---|---|---|---|---|
| Storefront pages | 2% | 5% | 14% | 16% | 3% | 39% |
| UCP over REST | 1% | — | 1% | 2% | 37% | 41% |
| UCP over MCP | 16% | — | 3%1% signature failed | — | <1% | 19% |
| UCP over A2A | Too few requests to split | 2% | ||||
| All doors | 20% | 5% | 18% | 18% | 40% | 100% |
Share of reads of the store's discovery files
| A2A agent card | 34% |
|---|---|
/.well-known/ucp the UCP profile | 34% |
| OAuth metadata | 15% |
/mcp tool list, read before a call | 8% |
/robots.txt | 6% |
/llms.txt | 2% |
/ucp/openapi.json | 1% |
What the store's UCP profile offers, and the share of agent sessions that used each
| Transport | In the UCP profile | Used by | Paid |
|---|---|---|---|
| UCP over REST | Yes | 23% | — |
| UCP over MCP | Yes | 6% | 14% |
| UCP over A2A | Yes | <1% | 100% |
The rest of sessions used storefront pages only (72%). A transport can be offered and still hardly used; that is a fact about agents today, not a fault in the store.
The latest paid journey from a verified agent. Requests from the same agent are joined into one journey when they share a signer or a UCP profile, across every door.
initialize · notifications/initialized · tools/list · initialize · notifications/initialized · tools/list
1274 ms
search_catalog × 3 results found
1450 ms
create_cart answered identity_required
190 ms
initialize · notifications/initialized · tools/list
1408 ms
search_catalog × 2 results found
1200 ms
initialize · notifications/initialized · tools/list · initialize · notifications/initialized · tools/list
1488 ms
create_checkout answered missing
1049 ms
update_checkout ready to pay
517 ms
complete_checkout · paid test order
3173 ms
initialize · notifications/initialized · tools/list
738 ms
search_catalog results found
742 ms
create_checkout answered missing
422 ms
update_checkout ready to pay
437 ms
complete_checkout · paid test order
2593 ms
initialize · notifications/initialized · tools/list
757 ms
search_catalog results found
1078 ms
create_checkout answered missing
506 ms
update_checkout ready to pay
520 ms
complete_checkout · paid test order
3142 ms
initialize · notifications/initialized · tools/list
630 ms
search_catalog results found
780 ms
create_cart answered identity_required
308 ms
initialize · notifications/initialized · tools/list
716 ms
search_catalog results found
883 ms
create_cart answered identity_required
229 ms
create_checkout answered identity_required
342 ms
initialize · notifications/initialized · tools/list
626 ms
search_catalog results found
864 ms
create_checkout answered missing
502 ms
update_checkout ready to pay
495 ms
complete_checkout · paid test order
2977 ms
initialize · notifications/initialized · tools/list
679 ms
search_catalog results found
989 ms
create_checkout answered missing
389 ms
update_checkout ready to pay
490 ms
complete_checkout · paid test order
3452 ms
Share of sessions. An agent is named only when it signed its requests with keys it publishes and the signature checked out, and it visited at least 3 times. Everyone else is grouped.
| Browsers | 56% |
|---|---|
| Search crawlers and bots | 18% |
| Scripts and tools | 15% |
| Declared a profile, not verified | 5% |
| Other verified agents | 5% |
Of the sessions from agents (not browsers or crawlers)
The store answers every agent, signed or not. Checking signatures began on 3 Oct 2026.
Share of sessions reaching each step
| Sessions | 100% |
|---|---|
| Searched | 6% |
| Viewed a product | 26% |
| Created a checkout | 1% |
| Ready to pay | 1% |
| Paid test order | 1% |
Every session ends in exactly one of these
| Never searched | 69% |
|---|---|
| Viewed, did not add | 25% |
| Searched, picked nothing | 5% |
| Paid | 1% |
Share of sessions by door, and the share of each that paid
| Storefront pages | 72% 0% paid |
|---|---|
| UCP over REST | 23% 0% paid |
| UCP over MCP | 5% 17% paid |
Which result agents go on to open or add
Too few picks to show a split yet.
By operation, for operations called often enough to show. 95.9% of all calls succeeded. A call fails when the store answers with an HTTP error or a protocol error.
| Operation | Succeeded | Typical | Slowest 5% |
|---|---|---|---|
GET /.well-known/agent-card.json | 100% | 222 ms | 277 ms |
GET /.well-known/ucp | 100% | 209 ms | 605 ms |
search_catalog | 81% | 374 ms | 989 ms |
tools/list | 100% | 221 ms | 271 ms |
GET /.well-known/oauth-protected-resource | 100% | 229 ms | 661 ms |
initialize | 100% | 225 ms | 283 ms |
GET /.well-known/oauth-authorization-server | 100% | 214 ms | 565 ms |
notifications/initialized | 100% | 232 ms | 305 ms |
Share of the error answers the store gave, by code
identity_requiredThe store answered with this error code40%missingA required checkout field was not sent33%capabilities_incompatibleThe store answered with this error code13%profile_unreachableThe store answered with this error code13%Things a store can't see on a normal analytics page
A session is one agent's requests with no gap longer than 30 minutes, joined across doors by a signer, a UCP profile, or a hash of network and user agent whose salt changes every day. Sessions under a scenario host (for example trade-slow) are included. How this page decides who arrived. Run your own version of this on a private copy of the store: how the sandbox works.