← 返回 Skills 市场

Ucp Checkout A2a

Name: Ucp Checkout A2a
Author: ichiorca

作者 Rohit Bajaj · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install ucp-checkout-a2a

功能描述

Implement UCP Checkout over the A2A (Agent-to-Agent) binding — enable autonomous agent-to-agent commerce using Agent Cards and structured message parts. Use...

使用说明 (SKILL.md)

UCP Checkout — A2A Binding

Before writing code

Fetch live spec: Web-search site:ucp.dev specification checkout-a2a and fetch the page for the exact message structure, DataPart keys, and Agent Card format.

Also review Google's A2A protocol spec for the underlying transport: https://google.github.io/A2A/

Conceptual Architecture

What is A2A?

A2A (Agent-to-Agent) is a protocol for autonomous inter-agent communication. UCP's A2A binding lets a Platform agent talk to a Business agent using structured messages rather than REST calls.

How It Works

Discovery: Business publishes an Agent Card at the URL declared in their /.well-known/ucp profile under services.dev.ucp.shopping.a2a.endpoint.
Communication: Platform sends messages with checkout data in DataPart objects. Business agent responds with checkout state in DataPart objects.
Identification: Platform includes UCP-Agent header and X-A2A-Extensions header referencing the UCP spec version.

Key Data Part Keys

Key	Direction	Purpose
`a2a.ucp.checkout`	Both	Checkout session data
`a2a.ucp.checkout.payment_data`	Platform → Business	Payment credentials for completion
`a2a.ucp.checkout.risk_signals`	Platform → Business	Optional risk signals
`ap2.merchant_authorization`	Business → Platform	Merchant's JWS detached content signature for AP2 mandate flow
`ap2.checkout_mandate`	Platform → Business	SD-JWT+kb credential proving user-authorized agent checkout

Message Structure

Messages use A2A's standard format:

messageId: Unique ID (used for idempotency)
contextId: Session/conversation ID
kind: "message"
role: "user" (from platform) or "agent" (from business)
parts: Array of TextPart and DataPart objects

Checkout data is carried in DataPart with the appropriate key.

Idempotency

The Business agent uses messageId to detect duplicate requests. Task tracking uses taskId with contextId.

When to Use A2A

Fully autonomous agent-to-agent commerce (no human in the loop for most steps)
Multi-agent architectures where commerce is one capability among many
When you want the Business to maintain its own agent logic (not just expose tools)

Implementation Guidance

Before implementing, fetch the latest sample A2A Business Agent from https://github.com/Universal-Commerce-Protocol/samples (look for the a2a/ directory) to see the reference pattern.

安全使用建议

This skill appears to be a benign developer guide, not executable malware. Before using it for real commerce, make sure any implementation requires clear user authorization, limits spending and merchants, protects payment credentials, validates agent identities, and pins the external specs or sample code it relies on.

功能分析

Type: OpenClaw Skill Name: ucp-checkout-a2a Version: 1.0.0 The skill bundle provides architectural guidance and protocol specifications for implementing Agent-to-Agent (A2A) commerce via the Universal Commerce Protocol (UCP). It contains no executable code and directs the agent to legitimate external documentation and sample repositories (ucp.dev, google.github.io, and github.com). The instructions in SKILL.md are consistent with the stated purpose of building commerce flows and do not exhibit signs of malicious intent or prompt injection attacks.

能力标签

cryptocan-make-purchases

能力评估

ℹ Purpose & Capability

The skill purpose is coherent with UCP Checkout over A2A, and the commerce/payment-related behavior is disclosed, but checkout automation is inherently high-impact.

ℹ Instruction Scope

The instructions are developer guidance rather than executable code, but they encourage autonomous commerce flows and should be implemented with explicit user approval, spending limits, and merchant scoping.

✓ Install Mechanism

There is no install spec, no code, no required binaries, and no required environment variables; the artifact is instruction-only.

ℹ Credentials

The skill asks the agent to fetch live specifications and sample code from external sites, which is expected for implementing a protocol but should be reviewed for provenance before use.

ℹ Persistence & Privilege

No persistence or local privilege escalation is shown, but the described protocol includes payment data and authorization credentials that must be handled as sensitive.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install ucp-checkout-a2a
安装完成后，直接呼叫该 Skill 的名称或使用 /ucp-checkout-a2a 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of ucp-checkout-a2a — enables agent-to-agent autonomous checkout via UCP's A2A binding. - Implements checkout flow using structured A2A messages and Agent Cards. - Details message format, key DataPart keys, and session management. - Provides guidance for spec lookup and reference sample implementation. - Suitable for building fully autonomous, multi-agent commerce flows.

元数据

Slug ucp-checkout-a2a

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Ucp Checkout A2a 是什么？

Implement UCP Checkout over the A2A (Agent-to-Agent) binding — enable autonomous agent-to-agent commerce using Agent Cards and structured message parts. Use... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 83 次。

如何安装 Ucp Checkout A2a？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ucp-checkout-a2a」即可一键安装，无需额外配置。

Ucp Checkout A2a 是免费的吗？

是的，Ucp Checkout A2a 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Ucp Checkout A2a 支持哪些平台？

Ucp Checkout A2a 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Ucp Checkout A2a？

由 Rohit Bajaj（@ichiorca）开发并维护，当前版本 v1.0.0。