Themesic Browser Agent Tools for WooCommerce

AI agents have started shopping for people. 🤖🛒

When an assistant like ChatGPT, Claude or an AI-powered browser lands on your store, it can do one of two things: scrape your pages and guess, or call tools you hand it and get the facts. This plugin hands it the tools.

Themesic Browser Agent Tools turns your WordPress site and WooCommerce store into a set of structured, permissioned WebMCP tools that AI agents discover and call directly. They can search your products, read prices and variations, check stock and browse your content. No scraping, no hallucinated prices, no guesswork.

It is built on WebMCP, the emerging web standard that lets a page offer AI agents a list of tools through the browser (document.modelContext). The same tools are also served over REST and OpenAPI for every other agent, including ChatGPT Custom GPT Actions, and they are described in the tool format of the Model Context Protocol (MCP) that agents already speak.

⚡ What agents can do on your store, out of the box

Ask an agent about your shop and it gets a real answer:

• “Do you have a merino scarf under $50?” – it calls search_products and gets the name, price, stock status and link.
• “Is the leather weekender in stock?” – check_product_stock returns a straight answer.
• “Which sizes does it come in?” – get_product_variations.
• “What do you sell?” – list_categories and get_store_info.
• “Find your article about returns.” – search across your posts and pages.

14 tools, free, no account, no API key:

• 🛍️ WooCommerce catalog (when WooCommerce is active): get_store_info, search_products, get_product, list_products, get_product_variations, check_product_stock, list_categories.
• 📝 WordPress content: get_site_info, get_menu, search, get_post, list_posts, list_categories, list_tags.

Every one of them is a read tool. Nothing in this plugin changes your content, your catalog or an order.

🌐 One set of tools, every kind of agent

• In the browser (WebMCP) – your tools register with WebMCP-capable browsers and agents through document.modelContext, with fallbacks for earlier previews of the API.
• REST and OpenAPI – /wp-json/themesic-agent/v1/manifest, /execute and /openapi, for any agent that can make an HTTP request. Import the OpenAPI URL into a Custom GPT as an Action and ChatGPT can query your catalog.
• Discovery – RFC 8288 Link headers and a discovery endpoint, so an agent finds the tools without being told where they live.

🔒 Security-first by design

• Every authorization decision is made on the server. The browser is never trusted.
• Reads of public content are public. Write tools always require a same-session nonce, and tools that touch an account require a real login.
• Four access tiers: public, browser session, logged in, and a specific capability.
• Switch any tool, or a whole group of tools, off from the admin.
• Per-caller and global rate limiting, applied before the permission check, so failed guesses still cost the caller quota.
• Output is sanitized before it reaches an agent, as a defence against stored XSS and prompt injection.
• Denied calls are logged next to successful ones, so probing is visible to you.
• Never exposed: the admin email, usernames, private meta, secrets, and password-protected or non-public content.

📊 A proper admin, not a settings page

• Dashboard – status, your agent endpoints, usage stats, the most-called tools and a warning when the error rate climbs.
• Playground – run any tool exactly as an agent would and see the JSON it receives.
• Activity log – every call, successes and denials alike, exportable to CSV. No personal data is stored.

🧩 Built for developers

Register your own tools with the themesic_agent_register_tools hook – no core files to edit. Custom tools get the same security gate, schema validation, rate limiting and all three delivery surfaces as the built-in ones. Further hooks let you add REST routes, resolve a caller’s identity, narrow which tools are allowed and extend the admin screens.

🛡️ Privacy

This plugin makes no external calls at all. Every tool runs inside your WordPress install, nothing is sent anywhere on activation or afterwards, and the optional activity log stores recent tool calls with no personal data (and can be cleared or turned off). There is no account, no licence check and no telemetry.

🚀 Go further with Pro

The free plugin lets agents read your store. Pro lets them act on it, and gives you the controls to keep that safe.

• 🛒 Agentic commerce – add to cart, update and remove lines, view the cart, apply and remove coupons, and read checkout fields. Agents build a real WooCommerce cart that the shopper sees and pays for.
• 📦 Customer orders – a signed-in customer’s own orders (ownership-scoped and HPOS-safe), plus guest order tracking by order number and email.
• 💡 Recommendations and back-in-stock alerts for signed-in customers.
• 🔌 MCP server endpoint – a JSON-RPC 2.0 Model Context Protocol server, so Claude Desktop, ChatGPT and agent frameworks connect from the server side with no browser in the loop.
• 🔑 Per-agent API keys – stored hashed, scoped, and never able to reach an admin-only tool.
• ✋ Human-in-the-loop confirmation – a flagged tool returns a single-use token and only runs once the agent comes back with it.
• 🎛️ Per-tool permission overrides and an agent-facing description editor, to steer exactly how agents use each tool.
• 📚 Store knowledge – your shipping, returns and FAQ text, so agents answer policy questions accurately instead of inventing them.
• 🗂️ Custom post type tools for any post type you allow.
• 🤝 Integrations – ACF, BuddyPress and BuddyBoss, Gravity Forms, Contact Form 7, WPForms, Paid Memberships Pro, Restrict Content Pro, MemberPress, LearnDash, LifterLMS, Tutor LMS, WooCommerce Bookings, Amelia, Bookly and WooCommerce Subscriptions.
• 📡 Webhooks and an IP allowlist.

✨ See Pro plans and pricing | Everything Pro includes

Pro is a separate plugin, sold and delivered from themesic.com. Nothing in this free plugin is locked, time-limited or switched off: everything described above the Pro section works on its own, and always will.