UCPtools – AI Agent Discovery for WooCommerce

AI shopping agents (ChatGPT, Gemini, Perplexity, Claude) look for a UCP profile at /.well-known/ucp to understand what a store sells and how to buy from it. Shopify generates one automatically. WooCommerce does not – so to an AI agent, most Woo stores return a 404 and simply do not exist.

This plugin serves that profile from your own origin, built from your WooCommerce store, and then records what agents do next: browse, open a checkout, pay, order.

It works with no account and transmits nothing until you enter a key.

Because you run your own server, a WooCommerce store can see the whole agent funnel. On hosted platforms the agent talks to the platform, not to you, so nobody can show you that traffic at all.

How it works

Your server answers the agent. UCPtools is never in the request path, so this plugin cannot become a point of failure for your storefront.

• Free, no account: generates and serves your UCP profile, and records agent activity into a table in your own database. wp-admin shows which agents came, how many requests they made, what they did, how many orders they placed and what those orders were worth. Nothing is sent anywhere.
• Connected (optional): paste an analytics key from your UCPtools dashboard. Your profile stays in sync with the dashboard, and the recorded history is sent there for long-term history, trends, multi-store views and break alerts. History captured before you connected comes with you.

What is free and what is paid

Everything the plugin works out is free, including what agent orders were worth. Which agents came, what they did, how many orders they placed and the value of those orders – all of it is shown in wp-admin, on your own server, with no account.

A UCPtools account adds what a plugin cannot do by itself: history that outlives the local rolling window, trends over time, several stores in one dashboard, alerts when your profile breaks, scheduled re-validation, hosted profiles and API access.

In short: the plugin never hides your own data from you. The subscription is for the hosted service around it.

The self-check

Intercepting /.well-known/ can be defeated by a physical .well-known folder, an nginx rule denying dot-directories, or a subdirectory multisite install – and every one of those fails silently, leaving you invisible while you believe you are discoverable. So the plugin fetches its own profile over the network and tells you exactly what an agent would get.

External services

This plugin can connect to UCPtools (https://ucptools.dev), and only if you enter an analytics key on its settings screen. With no key entered it makes no external requests of any kind.

When a key IS entered, it contacts UCPtools in three ways:

1. Key check – on the settings screen, it sends your key to https://ucptools.dev/v1/plugin/handshake to confirm the key is valid and show which plan it belongs to. Sends: your analytics key.
2. Profile sync – hourly, it requests https://ucptools.dev/v1/plugin/profile so edits made in your UCPtools dashboard reach your store. Sends: your analytics key.
3. Activity sync – hourly, it sends recorded agent activity to https://ucptools.dev/v1/analytics/events. Sends: which AI agent made a request, when, the endpoint path, the HTTP status, response time, and for agent checkouts the order total, currency and number of line items. It does not send customer names, emails, addresses, card or payment details.

The plugin also fetches your own site’s /.well-known/ucp URL for the wp-admin self-check. That request goes to your own server, not to UCPtools.

Service provider: UCPtools. Terms: https://ucptools.dev/terms – Privacy policy: https://ucptools.dev/privacy