Tillkeeper – AI Agent Approvals & MCP Security for WooCommerce

AI agents such as ChatGPT, Claude or your own bots can now work with a WooCommerce store directly, through the WordPress Abilities API and MCP. WooCommerce itself registers abilities that let an agent delete products and change order statuses – and they run immediately, with no confirmation.

Tillkeeper is an AI agent guard for WooCommerce. It sits between the agent and your store:

• Approval for dangerous actions. When an agent tries to delete a product or move an order to Completed, Cancelled or Refunded, nothing happens. The request waits on the Tillkeeper page until a store manager clicks Approve or Reject. The agent gets “pending approval” back and has no way to approve it itself – so even a confused or manipulated agent cannot do damage on its own.
• A log of everything agents do. Every call to a WooCommerce ability – reads and changes – is recorded: which ability, which product or order, which user, and what happened. The log stores IDs only, never customer names, emails or addresses.
• A clear picture of what agents can do. The Tillkeeper page lists every store ability available to agents, which ones change data, and which ones are protected.
• Your choice of strictness. Require approval for every order status change, only for final statuses, or not at all; turn product deletion protection on or off.
• Works with any agent. Tillkeeper protects WooCommerce’s own standard abilities, so any agent or MCP client that calls them is covered without learning anything new.

Tillkeeper also adds two read abilities WooCommerce does not have yet: tillkeeper/list-customers and tillkeeper/get-customer, available only to users who can list site users.

Tillkeeper Pro

Tillkeeper Pro goes deeper on the same protection: a preview of every change before it is applied, limits for discounts and stock changes (anything over them goes to the approval queue), protection for product edits, an hourly limit on agent changes, a before/after history, and one-click rollback for price and stock changes.

External services

This plugin does not connect to any external service. No data leaves your site. It only watches and guards abilities that software already running on your site (an MCP server, the REST API or an AI-agent integration) may call.