Service eligibility and regional restrictions
PuppyIP serves only compliant overseas businesses and their authorized personnel. Proxy services are not available in mainland China. The service may only be used for lawful business activities outside mainland China. Use of this service within mainland China is prohibited.
Hosting a proxy IP or server overseas does not change these restrictions. The service must not be provided to end users in mainland China through relaying, forwarding, sharing or resale. Before use, read the Terms of Service.
Key Takeaways
- The dev.ucp.shopping.buyer_consent extension applies to Checkout MCP or Cart MCP agents that negotiate it.
- If no choice is submitted, Shopify uses the store default for the buyer’s country; an unknown country defaults to opt-out.
- Set the source field to platform only for a choice the buyer actually made in your flow, and handle missing_consent_data before checkout.
Which Shopify integrations changed?
On October 16, 2026, Shopify announced buyer-consent support in Checkout MCP and Cart MCP, starting with UCP version 2026-08-25. It applies to shopping agents that discover and negotiate the extension; it does not silently change every older MCP integration.
A store can advertise the extension through /.well-known/ucp. After negotiation, the agent and store can exchange choices for purposes such as analytics, preferences, sale or sharing, and marketing. The store supplies the specific descriptions and policy links.
What happens if the buyer makes no selection?
If an agent does not submit a buyer choice, Shopify applies the store default for the buyer’s country. If the country is unknown, the default is opt-out. A missing field must not be represented as the buyer’s consent.
A consent object can also require details before checkout can proceed. For example, a text-marketing choice without a phone number may return a missing_consent_data warning; checkout cannot complete until the required information is supplied.
What should an agent show to the buyer?
When an agent profile negotiates dev.ucp.shopping.buyer_consent, shopping responses include a buyer.consent object with store-supported purposes, current state, purpose descriptions, and store policy links. Present those details so the buyer can choose in context.
If the buyer has not chosen, preserve the unselected state; do not rewrite a default as affirmative consent. If a purpose requires an email address or phone number, explain why and collect the required detail before returning the buyer’s choice.
How should choices be returned in Cart and Checkout?
Shopify supports submitting buyer choices when creating, updating, or completing a Cart or Checkout request. Declare and negotiate the supported UCP extension version, then show the store-provided purpose descriptions and policy links in your interface.
Set the source field to platform only when the buyer actually made that choice in your flow. After the request, inspect warnings; if the response contains missing_consent_data, provide the missing detail before continuing checkout.
Test the boundary with a sample cart
Before launch, check a test cart for these cases: the negotiated extension returns buyer.consent; selected and unselected states produce different request data; an unknown country follows opt-out; and a purpose needing extra details returns a readable warning.
The protocol helps an agent and a store exchange choices and required data. It does not decide which options your interface should show, and it is not a blanket guarantee of privacy or marketing compliance in every region. Follow the store policy and applicable rules in your implementation.
Sources
Frequently Asked Questions
Will this affect every shopping agent that uses Shopify MCP?
No. The announcement applies to Checkout MCP or Cart MCP using UCP 2026-08-25 when the agent profile negotiates the buyer-consent extension. Older integrations are not automatically changed.
Does Shopify treat a missing buyer.consent choice as consent?
No. Shopify applies the store default for the buyer’s country; when the buyer’s country is unknown, the default is opt-out.
Can missing_consent_data block checkout?
Yes. When a choice requires additional information and the response returns missing_consent_data, checkout cannot complete until the required detail is supplied. Use the response to identify what is missing.
When should I set the source field to platform?
Only when the buyer actually made the choice in your shopping flow. Do not use it to represent an unselected state or a system default.