Shopify: role and evidence
Structured product discovery and agent commerce interfaces. UCP checkout is distinct from paying an HTTP API with x402.
Evidence, not endorsement
A research and planning tool, not a vendor certification. Sources describe specific products, not every service offered by a company. Unknown means not established by the sources reviewed, not unsupported. grug402 sandbox tests do not test these vendors. Operational owners are suggested team contacts, not legal liability assignments.
Editorial review: 2026-10-08. Evidence older than 90 days needs rechecking; source check dates are not release dates.
Product and roles
Operator: Shopify. Product scope: Catalog API and Universal Commerce Protocol.
Retailers & commerce: Who offers and fulfills the purchase? Handoff: Product, price and order → payment and fulfillment. Suggested owner: Commerce engineering and order operations.
Prerequisites to confirm
Register an agent profile and obtain the required Catalog API access.
Validate merchant eligibility, checkout terms and supported payment methods.
Discovery
Documented: Catalog API exposes structured products; Shopify describes a public MCP entry point after agent registration.
Delegated authorization
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Retail checkout
Documented: Shopify describes UCP flows from product discovery through carts and checkout.
Paid API / tool
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Settlement
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Deployment
Not applicable: not assessed for this participant's listed role.
Operational controls
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Relevant sandbox tests — not vendor results
These are controlled grug402 scenarios. A passing sandbox request does not certify a company, integration, checkout or refund process.
- P1: A payment that completes — Establish a baseline before diagnosing failure cases. Suggested owner: Payments engineering.
- P1: Keep a spend within its limit — A quoted price can exceed the buyer's permitted per-call spend. Suggested owner: Agent product and security.
- P1: Interpret the amount correctly — A decimals mismatch can change the economic amount dramatically. Suggested owner: Payments engineering and treasury.
- P1: Check the intended recipient — A valid-looking request may name the wrong receiving address. Suggested owner: Payments engineering.
- P1: Retry without a duplicate charge — Lost responses should not cause the same purchase intent to be paid again. Suggested owner: Application engineering.
- P1: Handle paid-but-not-delivered — Settlement can succeed while the application fails to deliver. Suggested owner: Payments and customer operations.
- P2: Resolve an uncertain settlement — A server error does not establish whether money moved. Reconcile before retrying. Suggested owner: Payments operations and facilitator operator.