TL;DR: Auth0 is helping bring secure identity to the Universal Commerce Protocol (UCP) so retail, travel and hospitality brands can safely let AI agents discover and purchase products on shoppers' behalf. Understand Auth for UCP, and how you can join our upcoming Limited Early Access Program.
AI Agents Just Became Your Newest Sales Channel
| $3–5 Trillion | 44% | 693% |
|---|---|---|
| Global consumer spending projected to flow through AI agents by 2030. McKinsey, 2025 | Active AI users who now use conversational search as their primary discovery channel. McKinsey, 2025 | Year-over-year increase in generative AI referral traffic to retail storefronts. Adobe, 2026 |
Ask ChatGPT or Gemini to find weekend climbing gear, and they can now do more than recommend a product. Popular AI assistants can search retail catalogs, compare prices, build a cart, and in some cases complete checkout directly, without the shopper ever opening a retailer's app or website.
This is agentic commerce: AI agents acting on a shopper's behalf, from research through purchase through post-purchase support. Conversational search is becoming a discovery and purchase channel alongside search engines and marketplaces, which means retailers need a way to be discoverable, and transactable, there too.
That raises a question most retailers are not yet set up to answer: when an agent shows up at checkout, how do you know whether:
- A real, authorized person is behind that request.
- If that person actually gave permission to spend this money, on this cart, right now?
Without a reliable answer, retailers are stuck. They cannot keep AI agents out and risk becoming invisible, but neither can they open up access without a way to distinguish legitimate shoppers' agents from bad actors.
The rest of this blog will cover:
- What is UCP, and how it helps enable agentic commerce
- Introduction to Auth for UCP
- How it works
- Joining Auth0’s Auth for UCP Limited Early Access Program
What Is UCP, and How Does It Help?
The Universal Commerce Protocol (UCP) is an open standard that gives AI agents a consistent way to interact with a merchant's catalog, cart, and checkout. Instead of building a separate integration for every AI ecosystem, retailers can support one protocol that multiple agents can use.
For retailers, that means:
- One integration that can work across multiple agent surfaces, rather than one per platform.
- A shared vocabulary for catalog, cart, and checkout, which reduces custom integration work per partner.
- A foundation that is designed to extend as agentic commerce matures, not just to handle today's use cases.
Protocols like UCP define how agents interact with your store. They do not define who is allowed to act, on whose behalf, with what limits, or how you would prove that later. That is an identity problem, and it is what Auth for UCP is built to address.
Introducing Auth for UCP
Auth0 already supports retailers building agentic commerce solutions powered by MCP Servers and accessible to their customers through popular AI assistants like ChatGPT and Gemini. Now, Auth0 is one of the first providers to expand support to UCP with our new Auth for UCP solution providing the identity and trust layer to enable agentic commerce.
With Auth for UCP brands can:
Support a new sales channel. Let shoppers discover, compare, and buy from your brand inside AI assistants like Gemini, with checkout that is tied to a verified user identity.
Personalize each shopper’s experience. With a verified shopper’s identity behind the purchase, agents can recommend products based on their order history, credit loyalty points to their account, and apply any coupons they are eligible for, rather than treating every checkout as an anonymous purchase.
Why this matters to you:
- If you are a builder: Auth0 tackles the identity complexity behind UCP so you can focus on creating personalized experiences that maximize customer LTV.
- If you are responsible for security: Auth0 helps ensure every purchase ties to a verified human with scoped, time-limited access and a full audit trail.
- If you own the revenue number, Auth0 is how your teams can evolve quickly; by enabling UCP, you unlock a new, high-converting sales channel that turns on without requiring a re-platforming project.
How it works
Agent registration, not open access. Merchants decide which agent platforms can connect to their UCP server, whether that is a short list of named platforms with only verified agents that can connect, or a broader open policy.
Account linking, so the agent connects to the shopper’s merchant account. Shoppers can link the identity they use with the agent to their merchant account. Once linked, the merchant knows the agent is acting for that specific customer, which makes tracking order history, providing loyalty points, and personalizing search results possible.
Scoped, temporary access, not standing credentials. A shopper browses through an agent and approves a specific cart before purchase. At that point, Auth for UCP issues the agent a temporary, narrowly scoped token through an on-behalf-of token exchange, limited to that purchase, that amount, and a short window. The agent doesn't hold a standing credential, so even a compromised or misbehaving agent can't act outside what was approved.
Access limited to the shopper's own data. Because actions are performed on behalf of a known, authenticated user, the agent sees only that shopper's information, not the purchase history or details of another customer.
A record of who approved what. Registration, consent, token issuance, and purchase are each tied to a specific person and the permission they granted, so if a charge is disputed, there is a record to point to.
Join our Auth for UCP Limited Early Access Program Coming Soon
Auth0 is opening Auth for UCP Limited Early Access to a select number of customers through our Agentic Commerce Partnership Program. It is a great way to give feedback and help shape the future of secure agentic commerce.
Interested in joining Limited Early Access?
If you are evaluating how to support AI agents at checkout, or working with UCP already, we would like to talk.
Sign up to express interest in Auth0's UCP Limited Early Access and Partnership Program.
Learn about our AI Identity for Commerce offering.
Let’s go build the future of commerce together!