English | Español | Français | Deutsch
Trusteed Agentic Commerce for WooCommerce
AI agents are a new kind of online shopper. With Trusteed, the network that connects businesses and agents, they can buy from your store on your terms.
- Set your business rules: who can buy, up to what amount, which categories you don't offer to agents, price limits, stock levels that protect you from fraudulent agents, and more.
- Get signed receipts. Every transaction produces a cryptographically signed, tamper-evident receipt that records what the agent actually did, a verifiable proof of agent integrity. Aligned with eIDAS (EU) and with eSIGN (USA), but not yet a qualified signature or timestamp, so on its own it isn't ready-made dispute evidence for a bank or court.
- See what agents do: how much they spend, what they buy and how often.
- Block agents that look dangerous or cause problems.
- Accept purchases in digital currencies through the X402 protocol.
- Let agents and merchants trade directly, peer to peer.
- Check whether agents can buy from you. The agent readiness dashboard tests live whether AI agents can actually buy in your store today. It gives three independent views (what others say, what you promise versus what you do, what we've observed), and nothing is scored until it's verified.
Video guide
A walkthrough of the plugin: install, connect your store and use every panel.
English · Español (Spanish)
Screenshots
Each panel below maps to an item in the Trusteed menu inside WooCommerce.
| My Rules | Agents | Merchant Center |
|---|
| | |
| Trust Receipts (My Sales → AI Sales) | Agent Readiness |
|---|
| |
Every agent transaction produces a signed trust receipt, a tamper-evident record (aligned with eIDAS and with eSIGN) listed under My Sales → AI Sales. Click a row to see the details: agent ID, tool called, input and output hashes, JWS. You can also download the receipt as a ZIP file. The export is a verifiable proof of agent integrity. It's a useful backup if a buyer claims they never placed the order, but on its own it doesn't replace the evidence a bank or court may require in a dispute.
Features
The plugin connects your product catalog to AI shopping agents through the Model Context Protocol (MCP), an open standard created by Anthropic. It never processes payments or touches sensitive customer data. Checkout always happens in your native WooCommerce checkout.
- MCP tools for agents:
search_products, browse_categories, get_product_details and create_cart, which sends the shopper to the native WooCommerce checkout.
- Automatic catalog sync. Products sync through WooCommerce hooks when you create, update or delete them, stock changes included, and you can run a full manual sync from the settings page. Only public catalog data leaves your store (titles, descriptions, prices, images, categories, stock), never customer PII, orders or payment info.
- Agent token verification:
create_cart passes the agent's JWS token on to checkout, so signature and replay verification (R002) runs in the normal flow.
- Enforcement gate (HITL): configurable human-in-the-loop approval for high-value agent orders.
- SSRF hardening: the API base that carries your credentials must be HTTPS on an exact host allowlist. Cloud IMDS addresses (
169.254.0.0/16, 100.100.100.200, metadata.google.internal), IPv6 unique-local (fc00::/7) and link-local (fe80::/10) are blocked in every environment. Loopback and RFC1918 addresses only work behind the explicit TRUSTEED_ALLOW_LOCAL_API_BASE dev opt-in, which is off by default.
- Fail-closed defaults: nothing is dispatched when the enforcement secret is empty, and reconnecting requires proof that you own the domain, which protects against cross-merchant takeover.
Compatibility
| Component | Supported |
|---|
| WordPress | 6.0 – 7.0 |
| WooCommerce | 8.0 – 11.0 |
| PHP | 7.4+ (tested on 8.0–8.3) |
Requirements
Installation
Manual upload (recommended)
- Download the installable
.zip from the latest GitHub Release:
⬇ Latest release: trusteed-agentic-commerce-woocommerce-<version>.zip
or browse all versions at the Releases page.
- In your WordPress admin: Plugins → Add New → Upload Plugin.
- Select the downloaded
.zip file and click Install Now.
- Click Activate.
From source (build the zip yourself)
git clone https://github.com/Trusteedxyz/agentic-commerce-woocommerce.git
cd agentic-commerce-woocommerce
bash build-zip.sh # outputs dist/trusteed-agentic-commerce-woocommerce-<version>.zip
This is the beginning of the README. Read the rest at the original. Read the full README ↗
