UCPtools – AI Agent Discovery for WooCommerce

AI shopping agents (ChatGPT, Gemini, Perplexity, Claude) look for a UCP profile at
/.well-known/ucp to understand what a store sells and how to buy from it. Shopify
generates one automatically. WooCommerce does not – so to an AI agent, most Woo stores
return a 404 and simply do not exist.

This plugin serves that profile from your own origin, built from your WooCommerce store,
and then records what agents do next: browse, open a checkout, pay, order.

It works with no account and transmits nothing until you enter a key.

Because you run your own server, a WooCommerce store can see the whole agent funnel. On
hosted platforms the agent talks to the platform, not to you, so nobody can show you that
traffic at all.

How it works

Your server answers the agent. UCPtools is never in the request path, so this plugin
cannot become a point of failure for your storefront.

• Free, no account: generates and serves your UCP profile, and records agent activity
  into a table in your own database. wp-admin shows which agents came, how many requests
  they made, what they did, how many orders they placed and what those orders were worth.
  Nothing is sent anywhere.
• Connected (optional): paste an analytics key from your UCPtools dashboard. Your
  profile stays in sync with the dashboard, and the recorded history is sent there for
  long-term history, trends, multi-store views and break alerts. History captured before
  you connected comes with you.

What is free and what is paid

Everything the plugin works out is free, including what agent orders were worth. Which
agents came, what they did, how many orders they placed and the value of those orders – all
of it is shown in wp-admin, on your own server, with no account.

A UCPtools account adds what a plugin cannot do by itself: history that outlives the local
rolling window, trends over time, several stores in one dashboard, alerts when your profile
breaks, scheduled re-validation, hosted profiles and API access.

In short: the plugin never hides your own data from you. The subscription is for the hosted
service around it.

The self-check

Intercepting /.well-known/ can be defeated by a physical .well-known folder, an nginx
rule denying dot-directories, or a subdirectory multisite install – and every one of those
fails silently, leaving you invisible while you believe you are discoverable. So the plugin
fetches its own profile over the network and tells you exactly what an agent would get.

External services

This plugin can connect to UCPtools (https://ucptools.dev), and only if you enter an
analytics key on its settings screen. With no key entered it makes no external requests of
any kind.

When a key IS entered, it contacts UCPtools in three ways:

1. Key check – on the settings screen, it sends your key to
   https://ucptools.dev/v1/plugin/handshake to confirm the key is valid and show which
   plan it belongs to. Sends: your analytics key.
2. Profile sync – hourly, it requests https://ucptools.dev/v1/plugin/profile so edits
   made in your UCPtools dashboard reach your store. Sends: your analytics key.
3. Activity sync – hourly, it sends recorded agent activity to
   https://ucptools.dev/v1/analytics/events. Sends: which AI agent made a request, when,
   the endpoint path, the HTTP status, response time, and for agent checkouts the order
   total, currency and number of line items. It does not send customer names, emails,
   addresses, card or payment details.

The plugin also fetches your own site’s /.well-known/ucp URL for the wp-admin self-check.
That request goes to your own server, not to UCPtools.

Service provider: UCPtools. Terms: https://ucptools.dev/terms – Privacy policy:
https://ucptools.dev/privacy