Glossary

This glossary provides a best-effort capture of acronyms and terms used throughout the BCP specification. New entries should be added in alphabetical order within their respective category.

Note: Even with this glossary, it is preferred that the first usage of an acronym in each specification Markdown file spells out the full term (e.g., "Payment Card Industry Data Security Standard (PCI-DSS)").

Protocol

Term	Acronym	Definition
Agent Payments Protocol	AP2	An open protocol designed to enable AI agents to securely interoperate and complete payments autonomously. BCP leverages AP2 for secure payment mandates.
Agent2Agent Protocol	A2A	An open standard for secure, collaborative communication between diverse AI agents. BCP can use A2A as a transport layer.
Capability	-	A standalone core feature that a business supports (e.g., Checkout, Identity Linking). Capabilities are the fundamental "verbs" of BCP.
Credential Provider	CP	A trusted entity (like a digital wallet or a participating Open Finance Brasil PSP) responsible for securely managing and executing the user's payment and identity credentials.
Extension	-	An optional capability that augments another capability via the extends field. Extensions appear in ucp.capabilities[] alongside core capabilities.
Model Context Protocol	MCP	A protocol standardizing how AI models connect to external data and tools. BCP capabilities map 1:1 to MCP tools.
Profile	-	A JSON document hosted by businesses and platforms at a well-known URI, declaring their identity, supported capabilities, and endpoints.
Brazilian Commerce Protocol	BCP	The standard defined in this document, enabling interoperability between commerce entities via standardized capabilities and discovery.

Commerce

Term	Acronym	Definition
Business	-	The entity selling goods or services. In BCP, they act as the Merchant of Record (MoR), retaining financial liability and ownership of the order.
Merchant of Record	MoR	The legal entity responsible for the sale, including financial liability and order ownership.
Payment Service Provider	PSP	The financial infrastructure provider that processes payments, authorizations, and settlements on behalf of the business.
Platform	-	The consumer-facing surface (AI agent, app, website) acting on behalf of the user to discover businesses and facilitate commerce.

Payments

Pix is BCP's default payment method, via the handlers/pix payment handler. The card-related terms below (CVV, PCI-DSS, PAN, SCA, 3DS) apply only when a card-based payment handler is used for interoperability — they are not part of the Pix flow.

Term	Acronym	Definition
Pix	-	The Central Bank of Brazil's (BACEN) instant payment arrangement. It is BCP's default payment method, referenced in the protocol via the handlers/pix handler.
Open Finance Brasil	-	The BACEN-regulated ecosystem for standardized sharing of financial data and services between institutions, with user consent. Underpins Pix payment authorization and the role of Credential Providers (CP) in BCP.
Card Verification Value	CVV	The 3 or 4 digit security code on payment cards used to verify card-not-present transactions.
Payment Card Industry Data Security Standard	PCI-DSS	A set of security standards designed to ensure that all companies that accept, process, store or transmit credit card information maintain a secure environment.
Primary Account Number	PAN	The unique payment card number (typically 13-19 digits) that identifies the card issuer and cardholder account.
Strong Customer Authentication	SCA	A requirement under PSD2 (European regulation) that payment service providers apply multi-factor authentication for card-based electronic payments.
3D Secure	3DS	A protocol designed to add an additional security layer for online credit and debit card transactions through cardholder authentication.

Compliance & Regulatory

Term	Acronym	Definition
General Data Protection Law (Brazil)	LGPD	Brazil's personal data protection law (Law 13,709/2018). Governs data minimization and the handling of buyer and seller information in BCP extensions, such as NF-e.
California Consumer Privacy Act	CCPA	A state statute intended to enhance privacy rights and consumer protection for residents of California, United States.
General Data Protection Regulation	GDPR	A regulation in EU law on data protection and privacy in the European Union and the European Economic Area.
Know Your Customer	KYC	The process of verifying the identity of clients to prevent fraud, money laundering, and terrorist financing.

Standards & Specifications

Term	Acronym	Definition
International Organization for Standardization	ISO	An international standard-setting body composed of representatives from various national standards organizations. Referenced in BCP for country codes (ISO 3166-1), currency codes (ISO 4217), and date formats (ISO 8601).
Verifiable Digital Credential	VDC	An Issuer-signed credential (set of claims) whose authenticity can be verified cryptographically. Used in BCP for secure payment authorizations.