Connect Your Store

Link your WooCommerce store with a REST API key so agents can read orders, products, customers, and stock in real time.

Generate a WooCommerce REST API key

The platform sends a test request to your store. If the connection succeeds, a green status indicator appears and your agents can start using WooCommerce tools immediately.

What agents can do with your store

All nine WooCommerce tools are available to any agent you configure. The agent decides which tools to call based on the task:

Tool	What it reads or writes
wc_get_orders	Fetches a list of orders filtered by status, date range, or customer search. Returns IDs, totals, line items, and customer details.
wc_get_order	Retrieves full detail for a single order by ID, including all line items, shipping, billing, and metadata.
wc_create_order_note	Adds a note to an order visible to the store team or the customer. Used for triage and support workflows.
wc_get_products	Lists products with optional filters for category, status, stock level, and search keyword.
wc_get_product	Returns full product data for a single item by ID — name, description, attributes, price, images, and stock.
wc_update_product_stock	Updates the stock quantity and stock status for a product. Use with care — changes are applied immediately to your live store.
wc_low_stock_products	Returns products whose stock level has fallen to or below the WooCommerce low-stock threshold.
wc_get_customers	Searches and lists customers by email, name, or username. Returns contact details and order history summary.
wc_sales_report	Fetches aggregate sales data for a given period — total revenue, order count, average order value, and top-selling products.

Security

• Credentials encrypted at rest. Your Consumer Key and Consumer Secret are stored using AES-256 encryption. They are never displayed in the UI after saving and never visible to support staff.
• HTTPS only. All requests to your store are made over HTTPS. Plaintext HTTP endpoints are blocked.
• SSRF protection. The platform validates store URLs against an allowlist that blocks private IP ranges, loopback addresses, and cloud metadata endpoints, preventing server-side request forgery attacks.
• Read-only by default. If you generate a Read-only WooCommerce key, write operations (wc_create_order_note, wc_update_product_stock) will fail gracefully — the agent will report the error and stop those steps.