For WooCommerce stores
Let your customers’ AI agents shop your store.
More people now ask an AI assistant to find a product, compare options or reorder something they bought before. Agent Adapt gives those assistants a proper way into your WooCommerce store, through the open Personal Agent Protocol. Customers decide what their agent may do. You decide which agents you serve.
Free: the agent API, customer sign-in and checkout handoff. Pro: approvals, policy, MCP and insights.
# 1. Find the store's front door GET /.well-known/poppy.json 200 { "organization": { "name": "Your Store" }, … } # 2. Start a Session, as a verified agent POST /agent-adapt/oauth/token DPoP 200 { "session_id": "ses_…", "signed_in": false } # 3. Shop like any visitor (API: /wp-json/agent-adapt/v1) GET …/catalog/search?q=rain+jacket POST …/cart/items { "product_id": 128, "quantity": 1 } POST …/cart/handoff 200 { "url": "https://your-store.com/…" } # The customer opens the link and pays on your checkout.
The problem
Agents are already trying to use your store
Without a proper way in, they scrape your pages, guess at your cart, and sometimes ask your customers for their passwords. That is bad for the customer, and you can’t tell who is doing what.
Every agent is identified
An agent proves who it is with keys it publishes at its own address, and every request it makes is signed. You see its name and its domain, and you can block it.
Customers stay in charge
Account access needs the customer’s own approval, given on your store’s sign-in page. The agent never sees a password, and the customer can disconnect it at any time.
Payment stays with you
Agents build a cart, then hand it back. The customer pays on your own checkout, with your payment methods. The order shows which agent it came from.
How it works
Install it. Agents find you.
There are no API keys to issue and nothing to configure. Agents that follow the protocol discover your store, prove who they are, and get exactly the access the customer approves.
Discover
Agent Adapt publishes /.well-known/poppy.json at the root of your domain, with your store’s sign-in options and its agent API.
Shop
Without signing in, an agent can search your catalogue, read your policies, build a cart with your own prices and coupons, and hand it to the customer to check out.
Sign in, with permission
When the customer wants their agent to use their account, they approve it on your store. It can then read their orders and addresses, reorder, and cancel an unpaid order.
What a customer’s agent can do
The same store, a new kind of visitor
It’s still your WooCommerce cart, so your prices, taxes, stock rules and coupon rules all apply. Products you’ve hidden stay hidden.
Signed out
- Search products, read details, prices and stock
- Read your returns, terms and privacy pages
- Build a cart and apply coupons
- Hand the cart to the customer for checkout
Signed in
- List orders and read their details
- Cancel an order that isn’t paid
- Put a past order back in the cart
- Read saved addresses
You stay in control
Agents work inside your rules
Block any agent
WooCommerce → Agents lists every agent that has used your store, with its activity. Blocking one takes effect on its next request.
No staff accounts
Administrator and shop manager accounts can never be connected to an agent, by any route.
See where orders come from
Orders placed through an agent’s handoff show the agent in WooCommerce’s own order attribution.
Health checks
Site Health spots what commonly breaks agent access, such as a cache intercepting the discovery documents, and says how to fix it.
Pro
Let agents ask, and customers approve the exact terms
With Pro, an agent can ask to cancel a paid order with a refund, send you a return request, or change a saved address. Your store proposes the change in plain words. The customer approves that exact version in their assistant, and only then does your store act, exactly once.
Approvals
Changes are proposed with exact terms and performed at most once.
Merchant policy
Switch actions off, cap an agent at view-only, or accept only agents you approve.
MCP server
The same tools for any MCP-capable assistant, with the customer’s sign-in.
Agent insights
The agent funnel, net revenue against the web, abandoned carts, and webhooks.
An open standard
Built on the Personal Agent Protocol
The Personal Agent Protocol is an open standard for how a person’s AI agent works with a business. Agent Adapt implements its current draft for WooCommerce and follows it as it changes. Each change is listed in the changelog.
Guides
Read before you decide
Plain explanations, written from the published draft and the plugin’s own code, for store owners weighing this up.
The protocol, explained
What the Personal Agent Protocol is, who published it, what it asks of a store and what it leaves open.
Is it safe?
Spending, customer data, staff accounts, stolen tokens and rogue agents, one worry at a time.
Prepare your store
Hosting, product data, policy pages, caching and a first test, in the order to do them.
Five protocols compared
Personal Agent Protocol, UCP, ACP, AP2 and MCP: what each does and who holds the checkout.
Open your store to personal agents
Agent Adapt is free. It installs in a minute, and Site Health tells you if anything on your hosting needs a tweak.