Lutecia: UCP for WooCommerce

AI assistants are starting to buy on people’s behalf, using open standards such as UCP (Universal Commerce Protocol) to work with stores directly. Lutecia connects your WooCommerce store to them.

What you get

• Discovery. Your products, searchable by AI agents. When a shopper describes what they want, an agent can find it in your store.
• Checkout. The agent builds a cart and places the order in your store. It arrives in your store as a normal order.
• Orders. Everything shows up in your admin, and the agent can follow an order’s status after the sale. You fulfill them exactly as you do today.

How it works

• Install. Install and activate the plugin, then open WooCommerce, Lutecia. It takes about a minute.
• Approve. Confirm the connection from the plugin screen. Lutecia registers your store and starts reading your products.
• Live. Your store is live for AI agents. From here on, the plugin screen shows what is on and lets you turn it off.

When an AI platform changes its requirements, the update happens on Lutecia’s servers; you do not update the plugin for it.

Channels

UCP is on as soon as you connect, and you can turn it off under Controls. For ChatGPT, the plugin guides you through OpenAI’s merchant program; once accepted, Lutecia delivers your catalog in OpenAI’s format. For Google, Microsoft and Perplexity, the plugin links to each merchant program and, once they accept you, gives you a field to paste what they send you.

Controls

• Discovery: on by default. Your products, searchable by AI agents as soon as you connect. Turn it off from the dashboard at any time.
• Checkout: opt-in. Off until you turn it on from the dashboard.
• Sales attribution: off by default. A cookie on your storefront and a report of paid orders that came from an assistant.
• Catalog file: on by default. A daily file of your full catalog in Google Shopping format, for the programs that fetch a file rather than query live, such as Google and Microsoft Merchant Center.
• Disconnecting. One click on the dashboard: the API key is deleted and your store stops being served to assistants.

For developers

UCP version 2026-08-25. Capabilities: catalog search and lookup, cart, checkout, order, fulfillment, discounts, buyer consent, permalink. Transports: MCP (Model Context Protocol) and REST. The UCP discovery document is served on your domain. Daily catalog file in Google Shopping format. Nothing to host or update on your side.

External Services

This plugin connects your store to the Lutecia service (https://lutecia.app). It sends requests in the following situations:

• When you click Connect (or run wp lutecia connect): your shop URL, shop name, admin email (or the contact email you pass), language, currency, the URLs of your privacy policy and terms pages (shown to buyers by channels that require them), the agency code, if an agency managing your store gave you one, and a newly created read-only WooCommerce API key are sent to Lutecia to register your store.
• After connection: Lutecia uses the API key to read your products (names, prices, stock, images) and keeps a copy of the catalog on its servers to serve assistants.
• When your catalog changes: a signed notification (shop URL and timestamp, no product data) is sent so Lutecia can refresh your catalog.
• When an AI assistant requests your UCP address (/.well-known/ucp) on your domain: once your store is connected, the plugin fetches the UCP document from Lutecia and serves it (cached for one hour). Before you connect, nothing is sent.
• When you open the Lutecia screen, or run wp lutecia doctor: your shop’s domain is sent to Lutecia to check that the service is reachable and knows your store. No product or order data is sent.
• When a merchant program accepts you and gives you API credentials: the credentials you paste are sent to Lutecia over an authenticated request and stored encrypted.
• Only if you turn on Sales attribution, when an order that came from an AI assistant is paid: the order number, the order total, the currency and the attribution parameter are sent to Lutecia so your dashboard can show which sales came from assistants. No buyer name, email or address is sent.

With Sales attribution turned on, the plugin also sets one first-party cookie on your storefront, named lutecia_ref (30 days, HttpOnly, SameSite=Lax). It stores the ?ref=lutecia_... parameter carried by the product links Lutecia serves to AI assistants, so a resulting sale can be attributed. It is set only for visitors who arrive with that parameter, and holds no personal data. Because it is not strictly necessary to run your store, mention it in your cookie or privacy notice and collect consent where your law requires it. With Sales attribution off, the plugin sets no cookie and reports no order; turning it off also expires the cookie on a visitor’s next page load.

Provider: Lutecia. Terms of service and privacy policy: https://lutecia.app/legal