Grafo for WooCommerce

Grafo for WooCommerce extends the WooCommerce REST API with a single endpoint purpose-built for creating orders from outside the WordPress admin.

It is the bridge between your WooCommerce store and Grafo, a workflow automation platform that lets merchants take orders over WhatsApp. The plugin itself does not contain any WhatsApp or messaging logic — it only exposes one authenticated REST endpoint that an external, authorized caller (such as your Grafo workflow) can use to create an order:

• Create a WooCommerce order from a JSON payload (line items, billing/shipping addresses, payment method, custom meta)
• Automatically resolve applicable shipping rates for the order’s destination and attach the selected shipping line
• Automatically calculate and attach any cart-level fees configured on the store (via WooCommerce’s native fee hooks, plus a grafo_order_fees filter for custom fee logic)

Who this is for

Store owners who use Grafo to take orders through WhatsApp conversations and want those orders created in WooCommerce with correct shipping and fees, without giving the automation platform admin access to wp-admin.

External services

This plugin adds one new REST API route to your site; it does not make outbound requests to any third-party service itself. That route is designed to be called by your Grafo account: when you connect your store to Grafo, Grafo’s servers send authenticated requests to POST /wp-json/wc/v3/grafo-orders to create orders on your behalf. Only requests authenticated as a user with the manage_woocommerce capability (via a logged-in session or WooCommerce REST API consumer key/secret) are accepted. No data is transmitted anywhere by this plugin without such an authenticated request initiating it. See Grafo’s terms and privacy policy at https://www.grafoflow.com/ for how Grafo itself handles the data it sends and receives.

Privacy

This plugin does not collect analytics or telemetry, does not add any tracking scripts, and does not create any custom database tables. It only writes standard WooCommerce order data, for orders created through its REST endpoint — identical in structure to orders created any other way. No personal data is sent off-site by this plugin.