AI Agent Commerce for WooCommerce

The control layer for AI-powered shopping in WooCommerce.

AI Agent Commerce turns AI-generated purchase intents into secure, policy-governed WooCommerce orders. Instead of letting autonomous agents place unchecked orders, merchants get full control over what is auto-approved, what needs review, and what must be rejected.

Why this plugin matters

AI agents are becoming a real buying channel. This plugin helps you adopt that channel safely by adding governance, approval workflows, and clear auditability to every AI-driven order request.

How it works

• Create an agent and generate a one-time secret key
• Define policy limits (amount, timing, thresholds, active hours)
• Receive runtime agent intents via REST API
• Auto-approve, queue for approval, or reject based on policy
• Send approved intents to native WooCommerce checkout/payment flow

Core capabilities

• Agent lifecycle management: create, rotate key, revoke
• Policy engine decisions: approved, pending_approval, rejected
• Manual approval queue in wp-admin
• Intent logs and decision history for operational visibility
• Native WooCommerce payment URL handoff
• Summary dashboard for quick status monitoring

Policy controls

• Max Order Amount
• Daily Limit Amount
• Approval Threshold
• Min Interval (seconds)
• Active Hours + Timezone
• Rule Set JSON for advanced custom logic

Admin interface

• Dashboard
• Features
• Agents
• Policies
• Intents
• Approvals
• Settings

Security and reliability

• Capability checks for privileged actions
• Nonce verification on admin form submissions
• Sanitized input and escaped output patterns
• Rate limiting for runtime intent endpoint
• Hourly cleanup of expired approvals
• Configurable uninstall behavior (keep/remove plugin data)

Developer-ready API

• REST namespace: ai-agent-commerce/v1
• Runtime endpoint: POST /agent-intents
• Management endpoints for agents, policies, intents, approvals, and summary

Compatibility

• WordPress 6.8+
• WooCommerce 10.0+
• PHP 8.1+

Important note

This version is built on native WooCommerce order/payment flow and does not require external crypto gateway dependencies.

Package contents

• Plugin source code
• Single-page HTML documentation

Demo Credentials:

• Username: xpayr_demo
• Password: XpayrDemo!2026

• Policy-driven AI order intent handling for WooCommerce
• Dedicated AI Agent management (create, rotate key, revoke)
• One-time secret key generation with secure key lifecycle
• Flexible policy controls per agent:
  • Max Order Amount
  • Daily Limit Amount
  • Approval Threshold
  • Min Interval (seconds)
  • Active Hours and Timezone
  • Custom Rule Set JSON
• Decision engine with 3 outcomes:
  • Approved
  • Pending Approval
  • Rejected
• Manual Approval Queue in wp-admin for human review
• Intent logs and decision history (traceability/audit)
• Native WooCommerce order + payment URL handoff
• REST API endpoints for runtime and management operations
• Built-in rate limiting for runtime agent-intent requests
• Cleanup job for expired approvals + log retention settings
• Admin pages: Dashboard, Features, Agents, Policies, Intents, Approvals, Settings
• Single-page HTML documentation included

• WordPress: 6.8 or higher
• WooCommerce: 9.0 or higher
• PHP: 8.1 or higher
• HTTPS-enabled website (recommended for API security)
• WordPress REST API enabled (default in WordPress)
• WP-Cron enabled (for scheduled cleanup tasks)

1. Upload and activate the plugin from Plugins > Add New > Upload Plugin.
2. Open AI Agent Commerce from the WordPress admin left menu.
3. Go to Agents and create your first agent.
4. Copy the generated secret key (shown once) and store it safely.
5. Go to Policies and configure limits/rules for that agent.
6. Send order intents to the runtime API endpoint:
   • POST /wp-json/ai-agent-commerce/v1/agent-intents
   • Header: Authorization: Bearer YOUR_AGENT_SECRET_KEY
7. Review outcomes:
   • Approved intents continue to WooCommerce payment flow
   • Pending intents appear in Approvals
   • Rejected intents are logged with reason
8. Monitor activity in Intents and Dashboard.