169 packages matching ucp

@cf-commerce/mcp

v0.2.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

MCP (Model Context Protocol) stdio client for the Commerce Native platform — proxies tool calls to the remote MCP endpoint at /ucp/v1/mcp, handling session lifecycle and OAuth device-code authentication.

8Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.2.0 (the latest release), from the OSV.dev database.

0n-spec

v2.1.0 · 3 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The .0n Standard v2.1 — Universal AI orchestration format. 9 file types, 7-layer semantic knowledge architecture (patent pending), secure vault containers, Smart Deploy, 3 execution patterns. Powers 0nMCP (1,640+ tools, 109 services) including UCP, the .0

65Downloads across all versions in the last 7 days, from the official npm downloads API.CC-BY-4.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.1.0 (the latest release), from the OSV.dev database.

ucplint

v0.2.0 · 6 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The definitive Universal Commerce Protocol (UCP) validation tool. CLI + Library + API + MCP Server.

2Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.2.0 (the latest release), from the OSV.dev database.

nodebb-plugin-sso-flawless

v1.0.2 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

SSO bridge between Flawless RP UCP and NodeBB — JWT-based shared authentication

2Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.2 (the latest release), from the OSV.dev database.

@ucp-npm/mx-adapter

v3.0.2 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

MX Adapter for the Universal Connect Widget

6Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.2 (the latest release), from the OSV.dev database.

steelyard

v0.11.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The Steelyard SDK: define commerce once, serve it over commerce.json, HTTP, MCP, ACP, UCP, and x402, and run agentic payments from one package.

4Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.11.0 (the latest release), from the OSV.dev database.

@agentojs/medusa

v0.1.0 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Connect Medusa.js v2 to AI agents (Claude, ChatGPT, Gemini) — MCP, UCP, ACP protocols

5Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@ucp-npm/sophtron-adapter

v3.0.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Sophtron Adapter for the Universal Connect Widget

5Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.0 (the latest release), from the OSV.dev database.

0nork

v1.1.0 · 3 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

0nORK — AI Orchestration Infrastructure. 1,640+ tools, 109 services, 5 patents pending. Official MCP Registry listed. UCP + .0n App Marketplace + Course Builder + Lead Magnet Loop + Agentic Automation Generator + SaaS Factory + App Builder + Website Build

5Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.0 (the latest release), from the OSV.dev database.

ucp-comps

v1.0.74 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

融合通信组件库

70Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.74 (the latest release), from the OSV.dev database.

ucp-js

v1.0.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Universal Communication Protocol (UCP) for MQTT-based real-time communication in JavaScript

2Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

ucp-sdk

v0.0.1 · 6 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

UCP SDK for JavaScript/TypeScript

1Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1 (the latest release), from the OSV.dev database.

@curless/clubmed-demo

v0.31.0 · 3 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Demo Club Med storefront MCP — browse resorts worldwide and book them end-to-end: Club Med's merchant backend (mcp.curless.ai/clubmed) prices the resort and opens a merchant-quoted session; the buyer agent completes the payment with a card (ACP), a card o

1.1KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.31.0 (the latest release), from the OSV.dev database.

fast-ucp

v0.0.1 · 6 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Fast UCP Library for JavaScript/TypeScript

0Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1 (the latest release), from the OSV.dev database.

sil-openclaw

v0.4.6 · 12 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Turn your OpenClaw into an expert shopping agent.

236Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.4.6 (the latest release), from the OSV.dev database.

@xpaysh/storefront-audit

v0.1.1 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Conformance + readiness auditor for agentic-commerce storefronts. Checks /llms.txt, /.well-known/ucp, schema.org JSON-LD on PDPs, robots.txt AI-crawler allowlist, A2A agent-card, RFC 9728 OAuth resource metadata, and rejects fictitious well-known URIs. Li

4Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.1 (the latest release), from the OSV.dev database.

@xpaysh/http-message-signatures

v0.1.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

RFC 9421 HTTP Message Signatures — sign and verify Signature, Signature-Input, and Content-Digest headers. Targets the component set UCP and agentic-commerce REST contracts use (@method, @target-uri, content-digest, idempotency-key). Ed25519 primary; HMAC

4Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@xpaysh/adapter-contract

v0.1.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Platform-adapter TypeScript interface every agentic-commerce-for-* plugin implements. One contract, N adapters: WooCommerce, commercetools, BigCommerce, Magento, Shopify, Salesforce Commerce, PrestaShop, Saleor. Protocol-side packages (discovery, ucp-sche

4Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@segevfiner/pcre2

v0.1.2 · 11 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Node-API bindings to PCRE2

134Downloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.2 (the latest release), from the OSV.dev database.

@ucp-b2b/utp

v0.0.1-beta.0 · 28 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

UTP Protocol CLI - Universal Transaction Protocol client

0Downloads across all versions in the last 7 days, from the official npm downloads API.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1-beta.0 (the latest release), from the OSV.dev database.