Transparent badges

Show a public signal, not a made-up certification

These badges represent a limited, public endpoint scan. They never say “certified”, never imply a partnership and do not replace a protocol conformance test.

Badge rules: use one only for a URL you control. Keep the destination link to the verification receipt. The score can change when the public URL changes. Do not crop the method label or represent the badge as Visa, OpenAI, Shopify, Google, Stripe or Mastercard approval.

Generate embed code

What is checked

Reachability of the public homepage.
Public robots.txt, llms.txt and /.well-known/ucp paths.
Whether visible homepage HTML contains Product JSON-LD and policy vocabulary.

Use the scanner to inspect the receipt before publishing a badge. The public scanner and badge endpoint are rate-limited to 8 requests per 10 seconds per IP, and identical public checks may be reused for up to five minutes.