Allowfy for WooCommerce

Customers are starting to ask AI assistants to do things for them: “where is my order?”, “cancel it”, “return the jacket”. Allowfy is the secure front door those assistants use to work with your store.

• Your rules decide every action: allowed, needs the customer’s approval, needs your team, or refused, with limits per order and per customer over time.
• Customers approve the exact terms, and sign in with a code sent to the email of their store account. The assistant never sees their password.
• Each action runs at most once, and every step is recorded on a signed ledger.
• One switch stops every agent at once.

This plugin does four things on your store (the last two are optional):

1. It serves /.well-known/poppy.json on your own domain, so AI agents that follow the Personal Agent Protocol (Poppy) can find your store, and /.well-known/ucp, the Universal Commerce Protocol profile that shopping agents such as Google’s read to search your products.
2. It links to Allowfy, where you connect WooCommerce in one click: you approve on your store, and WooCommerce gives Allowfy a key directly.
3. Optionally, it shows the Allowfy store assistant on your pages: a chat that finds products and looks after orders, under the same rules, with customers signing in by a code to their email and approving every change.
4. Optionally, it fixes what the free Allowfy Check reports, on your own domain: an llms.txt written from your store, robots.txt rules that let AI assistants acting for customers in (keeping your other rules, such as WooCommerce’s add-to-cart links), and your shipping and return policy added to each product’s data, where assistants and search engines read it. Each one is off until you tick it under WooCommerce → Allowfy → AI readiness.

The plugin itself doesn’t read or change your orders. Allowfy does that through the WooCommerce REST API key you approve, and only within the rules you set.

External services

This plugin fetches your store’s discovery documents from Allowfy (app.allowfy.com) when an AI agent requests /.well-known/poppy.json or /.well-known/ucp, and caches them for five minutes. No customer or order data is sent by the plugin. The AI readiness options call no service at all. If you turn on the store assistant, your pages load its script from app.allowfy.com, and the chat window (served by Allowfy) sends what the visitor types to Allowfy and the AI model provider it uses. Terms: https://allowfy.com/terms · Privacy: https://allowfy.com/privacy