Title: Vixns Commerce Profile for Universal Commerce Protocol
Author: vixns
Published: <strong>September 9, 2026</strong>
Last modified: September 9, 2026

---

Search plugins

![](https://s.w.org/plugins/geopattern-icon/vixns-commerce-profile-ucp.svg)

# Vixns Commerce Profile for Universal Commerce Protocol

 By [vixns](https://profiles.wordpress.org/vixns/)

[Download](https://downloads.wordpress.org/plugin/vixns-commerce-profile-ucp.0.4.0.zip)

 * [Details](https://wordpress.org/plugins/vixns-commerce-profile-ucp/#description)
 * [Reviews](https://wordpress.org/plugins/vixns-commerce-profile-ucp/#reviews)
 *  [Installation](https://wordpress.org/plugins/vixns-commerce-profile-ucp/#installation)
 * [Development](https://wordpress.org/plugins/vixns-commerce-profile-ucp/#developers)

 [Support](https://wordpress.org/support/plugin/vixns-commerce-profile-ucp/)

## Description

Vixns Commerce Profile for Universal Commerce Protocol writes an honest business
profile JSON to a static file at `/.well-known/ucp`, can expose UCP catalog REST(
search / lookup / product), and can publish `keys[]` (JWK Set) with rotation for
Web Bot Auth `type=jwks_uri` interop.

This is a third-party WooCommerce integration by Vixns. It is not an official Universal
Commerce Protocol product.

 * Spec target: 2026-08-25
 * Never advertises checkout, cart, or payment handlers
 * Private keys stored under `uploads/vixns-commerce-profile-ucp/private/` (Apache/
   IIS deny files are written automatically; block the path on nginx)
 * Optional product feed (JSONL), not linked from the profile
 * Catalog REST is intentionally open to agents that send a valid `UCP-Agent` header(
   same visibility as a public product catalog)

## Installation

 1. Install and activate WooCommerce.
 2. Upload the `vixns-commerce-profile-ucp` folder to `/wp-content/plugins/` (or install
    the ZIP via Plugins  Add New).
 3. Activate **Vixns Commerce Profile for Universal Commerce Protocol**.
 4. Configure your web server to serve `/.well-known/ucp` as static JSON with `Cache-
    Control: public, max-age≥60` and **no redirects**.
 5. Open WooCommerce  Settings  **Vixns UCP**, set the canonical HTTPS host if needed,
    then **Generate now**.

Example nginx location (adjust `root`):

    ```
    location = /.well-known/ucp {
        default_type application/json;
        add_header Cache-Control "public, max-age=300" always;
        add_header Access-Control-Allow-Origin "*" always;
        add_header Access-Control-Allow-Methods "GET, HEAD" always;
        try_files /.well-known/ucp =404;
    }

    # Deny private key material (nginx ignores .htaccess):
    location ^~ /wp-content/uploads/vixns-commerce-profile-ucp/private/ {
        deny all;
        return 403;
    }
    ```

## FAQ

### How do I serve /.well-known/ucp?

See the nginx example under Installation. Do not apply wwwapex redirects to this
URI — UCP platforms do not follow 3xx on the profile URL.

### Web Bot Auth

Use: `Signature-Agent: sig1="https://yoursite/.well-known/ucp";type=jwks_uri`

Omitting `type` defaults to `directory`, which does not read this static profile.

### Catalog REST

Base: `/wp-json/ucp/v1` — POST `/catalog/search`, `/catalog/lookup`, `/catalog/product`.

Requires header: `UCP-Agent: profile="https://yoursite/.well-known/ucp"`. There 
is no WordPress cookie auth on these routes (agent discovery). Disable Catalog REST
in settings if you do not want them.

### Where are private keys stored?

Default: `wp-content/uploads/vixns-commerce-profile-ucp/private/`. Prefer a path
outside the document root via the `vixns_ucp_private_key_dir` filter. On nginx, 
always deny the default directory explicitly.

### Is this an official Universal Commerce Protocol plugin?

No. It is developed by Vixns as a third-party WooCommerce integration.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Vixns Commerce Profile for Universal Commerce Protocol” is open source software.
The following people have contributed to this plugin.

Contributors

 *   [ vixns ](https://profiles.wordpress.org/vixns/)

[Translate “Vixns Commerce Profile for Universal Commerce Protocol” into your language.](https://translate.wordpress.org/projects/wp-plugins/vixns-commerce-profile-ucp)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/vixns-commerce-profile-ucp/),
check out the [SVN repository](https://plugins.svn.wordpress.org/vixns-commerce-profile-ucp/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/vixns-commerce-profile-ucp/)
by [RSS](https://plugins.trac.wordpress.org/log/vixns-commerce-profile-ucp/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 0.4.0

 * Renamed for WordPress.org trademark clarity (slug vixns-commerce-profile-ucp).
 * Private keys and feed default under uploads/{slug}/; tightened write allowlist
   to .well-known + uploads plugin dir.

#### 0.3.0

 * Signing keys[] (EdDSA/ES256), rotate/revoke, WBA jwks_uri documentation.
 * Path allowlist for profile/feed writes; HTTPS-only canonical host / probe.
 * Test-only failure filters gated behind VIXNS_UCP_TESTING.

#### 0.2.0

 * Catalog REST: search, lookup, product; profile advertises services + catalog 
   capabilities.

#### 0.1.0

 * Initial release: profile generation, dual scheduler, WP-CLI, admin status/probe,
   optional JSONL feed.

## Meta

 *  Version **0.4.0**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.4 or higher **
 *  Tested up to **7.1**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [ai agents](https://wordpress.org/plugins/tags/ai-agents/)[discovery](https://wordpress.org/plugins/tags/discovery/)
   [ucp](https://wordpress.org/plugins/tags/ucp/)[well-known](https://wordpress.org/plugins/tags/well-known/)
   [woocommerce](https://wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://wordpress.org/plugins/vixns-commerce-profile-ucp/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/vixns-commerce-profile-ucp/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/vixns-commerce-profile-ucp/reviews/)

## Contributors

 *   [ vixns ](https://profiles.wordpress.org/vixns/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/vixns-commerce-profile-ucp/)