=== Universal Commerce Protocol (UCP) for WooCommerce === Contributors: siteupgradepro Donate link: https://siteupgradepro.com/ Tags: ai, woocommerce, mcp, checkout, ai-agent Requires at least: 5.8 Tested up to: 6.9 Requires PHP: 7.4 Stable tag: 1.0.4 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html Enable the Universal Commerce Protocol (UCP) for WooCommerce. Let AI agents discover, browse, and purchase products for your customers safely. == Description == **UCP Ready** transforms your WooCommerce store into an AI-agent-friendly commerce platform by implementing the [Universal Commerce Protocol (UCP)](https://ucp.dev). AI agents like Google's shopping assistants, ChatGPT plugins, and custom MCP clients can now: * 🔍 **Discover** your store's capabilities via a `.well-known/ucp` endpoint * 📦 **Browse** your product catalog with AI-optimized metadata * 🛒 **Create checkout sessions** with full shipping and discount support * 🔐 **Authenticate** via OAuth 2.0 Identity Linking * 💬 **Communicate** over REST, MCP (JSON-RPC), or Embedded Protocol bindings = Key Features = * **Multi-Transport Support** — REST API, MCP (Model Context Protocol), and Embedded Protocol (EP) bindings * **AI-Optimized Catalog** — Products are served with quick facts and FAQs designed for agent consumption * **OAuth 2.0 Identity Linking** — Agents can act on behalf of authenticated users * **Shipping & Fulfillment** — Full integration with WooCommerce Shipping Zones * **Discount Codes** — Agents can apply coupon codes during checkout * **GDPR Compliance** — Buyer consent management built-in * **Order Tracking** — Agents can query order status and fulfillment events * **Bot Tracker** — Monitor AI agent traffic on your store * **Built-in Simulator** — Test the full agent flow from your WordPress admin = Who Is This For? = * **Store owners** who want to be ready for the AI commerce revolution * **Developers** building AI shopping agents or MCP clients * **Agencies** deploying WooCommerce stores that need to be AI-discoverable = How It Works = 1. Install and activate the plugin 2. Your store automatically exposes a UCP discovery endpoint at `/.well-known/ucp` 3. AI agents find your store, browse products, and create checkout sessions 4. Customers complete payment through your existing WooCommerce checkout = Links = * [UCP Specification](https://ucp.dev) == Installation == = Automatic Installation = 1. Go to **Plugins → Add New** in your WordPress admin 2. Search for "UCP Ready" 3. Click **Install Now**, then **Activate** = Manual Installation = 1. Download the plugin ZIP file 2. Go to **Plugins → Add New → Upload Plugin** 3. Upload the ZIP file and click **Install Now** 4. Activate the plugin = Requirements = * WordPress 5.8 or higher * WooCommerce 5.0 or higher * PHP 7.4 or higher * Pretty Permalinks enabled (Settings → Permalinks) = After Activation = * An API key is automatically generated for you * Discovery endpoints are registered at `/.well-known/ucp` * Visit **Settings → UCP & GEO Dashboard** to see the AI Readiness Checklist and configure options == Frequently Asked Questions == = What is the Universal Commerce Protocol (UCP)? = UCP is an open protocol that enables AI agents to interact with online stores in a standardized way. It defines how agents discover stores, browse catalogs, create checkouts, and handle payments — all without screen scraping. = Do I need to modify my products? = No! The plugin works with your existing WooCommerce products out of the box. You can optionally add AI-optimized metadata (Quick Facts, FAQs) to enhance the agent experience. = Is this compatible with my payment gateway? = Yes. UCP creates standard WooCommerce orders. The customer completes payment through your existing checkout flow, so any payment gateway that works with WooCommerce will work with UCP. = What is MCP (Model Context Protocol)? = MCP is a JSON-RPC based protocol that allows AI models to call tools. UCP Ready exposes your store's catalog and checkout as MCP tools that can be called by compatible AI agents. = Is the OAuth 2.0 flow secure? = Yes. The Identity Linking implementation follows RFC 6749 and RFC 8414 standards with: * Authorization codes that expire in 5 minutes * Token rotation on refresh * Redirect URI validation * Proper token revocation (RFC 7009) = Does this slow down my store? = No. The plugin only adds lightweight REST API endpoints and a small `` tag to your HTML head. There is no impact on your storefront loading speed. = What data is shared with AI agents? = Only publicly available product data (name, price, description, images) is shared through the catalog API. Customer data is never exposed without explicit OAuth 2.0 authorization. = Can I restrict which agents access my store? = Yes. You can set an API key in the plugin settings. Only agents with the correct key can access the UCP endpoints. == External services == This plugin uses external JSON schemas from ucp.dev to define protocol responses. * What the service is: `ucp.dev` is the central repository for the Universal Commerce Protocol schemas. The schema URLs are included in API responses so AI agents know how to parse the data. * What data is sent and when: No personal, store, or customer data is sent to `ucp.dev`. The service is acting strictly as a static schema host. * Service Policies: [Terms of Use](https://ucp.dev/terms) and [Privacy Policy](https://ucp.dev/privacy). == Screenshots == 1. **UCP & GEO Dashboard** — AI Readiness Checklist shows your store's compatibility status 2. **Bot Traffic Monitor** — Track which AI agents are visiting your store 3. **AI Agent Simulator** — Test the full shopping flow from your admin panel 4. **OAuth Consent Screen** — Clean authorization UI for Identity Linking 5. **Discovery Endpoint** — JSON response at /.well-known/ucp == Changelog == = 1.0.4 = * Address WordPress.org review feedback (Contributors, Late Escaping, JSON-LD output). = 1.0.3 = * Resolved WordPress.org review issues (Ownership verification, Prefixing). * Documented external schema usage. * Security fixes for inline scripts and REST permissions. = 1.0.0 = * Initial release * REST, MCP, and Embedded Protocol transport bindings * Product catalog API with AI-optimized metadata * Checkout session creation with WooCommerce integration * OAuth 2.0 Identity Linking with token rotation * Shipping zone integration and fulfillment tracking * Discount/coupon code support * GDPR-compliant buyer consent management * Order status and fulfillment event tracking * AI bot traffic monitoring * Built-in E2E simulator for all transports * Comprehensive compliance test suite (22 test groups) == Upgrade Notice == = 1.0.4 = Security and compliance update addressing review feedback. = 1.0.3 = Update to 1.0.3 for full WordPress Plugin Directory compliance and minor security fixes. = 1.0.0 = First stable release. Install to make your WooCommerce store AI-agent compatible via the Universal Commerce Protocol.