VoxCart for WooCommerce

VoxCart for WooCommerce is a connector for VoxCart — a voice-AI platform that lets customers call your store using natural speech (ask about orders, products, shipping, etc.).

The plugin acts as a bridge between your WooCommerce store and the VoxCart AI backend. An active VoxCart subscription is required to use this plugin.

What the plugin does:

• Storefront voice widget — injects a floating “call” button on your store. When a customer clicks it, the widget opens a live voice session with your AI agent. Sessions are created server-side so your API key and embed token never reach the browser; only a short-lived session token does.
• WooCommerce event streaming — captures order, product, and customer lifecycle events through WooCommerce hooks, queues them durably, and makes them available for your AI agent to read.
• Admin dashboard — shows configuration status and a searchable log viewer.
• Clean uninstall — optionally deletes all plugin data (settings, logs, event queue) when the plugin is removed.

Security highlights:

• API key is encrypted at rest using AES-256-GCM, keyed from your WordPress auth salt — it is never exposed to the browser.
• All admin endpoints require the manage_woocommerce capability and a valid nonce.
• Public (storefront) endpoints are rate-limited.
• Fully compatible with WooCommerce HPOS (High-Performance Order Storage / custom order tables).

External Services

This plugin connects to the VoxCart AI platform hosted by TheOne Technologies. Specifically:

1. Session creation (server-side, admin-initiated) — When a storefront visitor loads a page with the widget enabled, the plugin sends a request from your WordPress server to:
   https://voxcart-ai-api.theonetechnologies.co.in/api/v1/workflow/{agent_id}/embed-token
   and
   https://voxcart-ai-api.theonetechnologies.co.in/api/v1/public/embed/init
   Data sent: your embed token, site hostname, store name, and context variables. No customer personal data is sent. The API key is included in server-to-server headers only.

2. Voice widget (browser-to-platform, customer-initiated) — When a customer starts a voice call, the browser loads the widget script from:
   https://voxcart-ai.theonetechnologies.co.in/embed/theone-widget.js
   and opens a WebSocket connection to:
   wss://voxcart-ai-api.theonetechnologies.co.in:7443/api/v1/ws/public/signaling/{session_token}
   Audio is streamed directly between the customer’s browser and the VoxCart platform. This plugin does not store audio.

These connections are only made when the plugin is fully configured (API key, Agent ID, and Agent API URL saved) and the storefront widget is enabled.

• VoxCart Privacy Policy: https://voxcart.theonetechnologies.co.in/privacy
• VoxCart Terms of Service: https://voxcart.theonetechnologies.co.in/terms
• TheOne Technologies: https://theonetechnologies.co.in