WP Manifestindependent plugin directory
manifest / ecommerce / woocommerce-ai-storefront

WooCommerce AI Storefront WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

** PRE-RELEASE EXPERIMENTAL NOT FOR PRODUCTION ** Make every WooCommerce store discoverable by AI shopping assistants while keeping checkout, customer data, and brand experience under merchant control

★ 3stars
190release downloads
v0.40.0latest · 1mo ago

Install

Download woocommerce-ai-storefront-v0.40.0.zip From the v0.40.0 release on GitHub, Aug 26, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/automattic/woocommerce-ai-storefront/releases/download/v0.40.0/woocommerce-ai-storefront-v0.40.0.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Make your WooCommerce catalog discoverable by AI assistants (ChatGPT, Gemini, Claude, Perplexity, Copilot) while keeping checkout, customer data, and brand experience under merchant control.

Core principle: AI agents discover and recommend. The merchant owns the transaction.

Status: active prototype-phase development. Iterating fast; expect frequent releases. Every release ships with full test coverage and a detailed CHANGELOG entry. Cadence will slow as the plugin enters the hardening phase. See CONTRIBUTING.md for development setup and conventions.

What it does

Publishes three discovery surfaces that AI crawlers consume:

  • /llms.txt — Markdown store guide (categories, featured products, attribution instructions)
  • /.well-known/ucp — JSON manifest declaring capabilities, checkout policy (web-redirect only), and purchase URL templates
  • Enhanced JSON-LD on product pages — Schema.org Product augmented with BuyAction, inventory, attributes, shipping details

Plus integrations with WordPress and WooCommerce:

  • robots.txt — per-crawler allowlist for 12 commerce-relevant AI bots
  • Store API rate limiting — built-in WC rate limiter fingerprints AI bots by user-agent (regular customer traffic is unaffected)
  • Order Attribution — standard utm_medium=ai_agent capture, surfaced in WooCommerce core's built-in "Origin" column

What it doesn't do

  • No delegated payments. Checkout happens on your store.
  • No authentication. No API keys to manage.
  • No custom rate limiter. Uses WC's built-in with user-agent fingerprinting.
  • No Stripe or other payment provider dependency.
  • No MCP (Model Context Protocol) abilities registered by AI Storefront yet. WooCommerce core now ships native MCP support starting in WC 10.3.0 (developer preview, gated by the mcp_integration feature flag), with purpose-built abilities for product and order management and a path for third-party plugins to register their own via the WordPress Abilities API. No separate extension needed; the integration is in core, just enable the flag. MCP and UCP serve different audiences, and this point is about the admin-side one. AI Storefront does ship its own shopper-side MCP transport (WC_AI_Storefront_MCP_Server, on by default), which is the UCP shopping capabilities re-expressed as MCP tools for external buyers' agents: MCP is admin-side (the merchant's own AI assistants acting on the store from inside the admin), while UCP is transport for external shopping agents discovering the catalog over the public web. Registering AI Storefront-specific MCP abilities (e.g. catalog-taxonomy audit, JSON-LD verification) is on the roadmap; until then, merchants on WC 10.3+ who enable the flag can already use AI assistants to read and edit products and categories directly via WC's own abilities.

Requirements

  • WordPress 6.7+
  • WooCommerce 9.9+
  • PHP 8.0+

Installation

See readme.txt for the user-facing installation steps. For development:

git clone <this repo>
cd woocommerce-ai-syndication
npm install && npm run build
composer install

Then symlink or copy the plugin directory into a WordPress install's wp-content/plugins/ and activate through the admin.

Development

npm run build                   # Build frontend bundle
npm run test:js                 # Run JS tests (Jest)
npm run lint:js                 # Lint JS (ESLint via @wordpress/scripts)
vendor/bin/phpunit              # Run PHP tests (PHPUnit + Brain Monkey)
vendor/bin/phpcs                # Lint PHP (WordPress-Extra standard)
vendor/bin/phpcbf               # Auto-fix PHPCS violations
vendor/bin/phpstan analyse      # PHP static analysis (level 5)

CI runs all of the above on every push to main and on pull requests. See .github/workflows/ci.yml.

Documentation

Architecture

See docs/engineering/ARCHITECTURE.md for a detailed architecture overview, file map, and design decisions. (AGENTS.md at the repo root is a pointer for AI coding agents and links here.)

In brief:

  • Discovery layer — three stateless generators (LlmsTxt, Ucp, JsonLd) emit the public surfaces. Event-driven cache invalidation on product/category/settings changes keeps them fresh.
  • Attribution — hooks into WooCommerce Order Attribution to capture AI-referred orders; no custom checkout flow.
  • Rate limiting — configures WC's built-in Store API rate limiter via woocommerce_store_api_rate_limit_options / _id filters.
  • Admin UI — React app built with @wordpress/components and @wordpress/data. Color tokens are centralized in client/settings/ai-syndication/tokens.js.

Contributing

Issues and pull requests welcome. Please:

  1. Run the full quality gate (phpunit, phpcs, phpstan, test:js, lint:js) before opening a PR.
  2. Include tests for new behavior. PHP tests use Brain Monkey (no WordPress install required).
  3. Follow the styling rules in AGENTS.md — design tokens via tokens.js, component precedence rules for @wordpress/components vs. @woocommerce/components.

License

GPL-3.0-or-later. See LICENSE if present, or the GPL at https://www.gnu.org/licenses/gpl-3.0.html.

Releases

Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v0.40.0 latest
Aug 26, 2026 1mo ago
woocommerce-ai-storefront-v0.40.0.zip
6
Aug 24, 2026 2mo ago
woocommerce-ai-storefront-v0.39.1.zip
2
Aug 23, 2026 2mo ago
woocommerce-ai-storefront-v0.39.0.zip
2
Aug 19, 2026 2mo ago
woocommerce-ai-storefront-v0.38.1.zip
2
Aug 18, 2026 2mo ago
woocommerce-ai-storefront-v0.38.0.zip
2
Aug 17, 2026 2mo ago
woocommerce-ai-storefront-v0.37.0.zip
2
Aug 15, 2026 2mo ago
woocommerce-ai-storefront-v0.36.0.zip
2
Aug 14, 2026 2mo ago
woocommerce-ai-storefront-v0.35.0.zip
2
Jul 29, 2026 2mo ago
woocommerce-ai-storefront-v0.34.3.zip
3
Jul 29, 2026 2mo ago
woocommerce-ai-storefront-v0.34.2.zip
3
Jul 21, 2026 3mo ago
woocommerce-ai-storefront-v0.34.1.zip
2
Jul 10, 2026 3mo ago
woocommerce-ai-storefront-v0.34.0.zip
2
Jul 4, 2026 3mo ago
woocommerce-ai-storefront-v0.33.0.zip
2
Jul 3, 2026 3mo ago
woocommerce-ai-storefront-v0.32.0.zip
4
Jul 3, 2026 3mo ago
woocommerce-ai-storefront-v0.31.0.zip
4
Jul 2, 2026 3mo ago
woocommerce-ai-storefront-v0.30.0.zip
2
Jun 27, 2026 3mo ago
woocommerce-ai-storefront-v0.29.2.zip
5
Jun 27, 2026 3mo ago
woocommerce-ai-storefront-v0.29.1.zip
3
Jun 27, 2026 3mo ago
woocommerce-ai-storefront-v0.29.0.zip
4
Jun 25, 2026 3mo ago
woocommerce-ai-storefront-v0.28.3.zip
5
Jun 24, 2026 4mo ago
woocommerce-ai-storefront-v0.28.2.zip
5
Jun 23, 2026 4mo ago
woocommerce-ai-storefront-v0.28.1.zip
4
Jun 23, 2026 4mo ago
woocommerce-ai-storefront-v0.28.0.zip
3
Jun 23, 2026 4mo ago
woocommerce-ai-storefront-v0.27.0.zip
5
Jun 22, 2026 4mo ago
woocommerce-ai-storefront-v0.26.0.zip
5
All releases on GitHub →
A grade

Security

WooCommerce AI Storefront 0.40.0 · audited by WP Registry

No security issues found.

Audited release
0.40.0
Findings
none
Worst severity
—
Content hash
26e0776b81e4b40c9e87a5c3…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.