Quote & Cut

Quote & Cut connects WooCommerce to the Quote & Cut cloud service for laser-cutting and sheet-optimization workflows.

With this plugin you can:

• Accept DXF uploads from customers.
• Calculate pricing from cloud-based nesting results.
• Add configured jobs to the WooCommerce cart and checkout flow.
• Store generated job data and production files with WooCommerce orders.
• Manage API setup, styling, and order output from the WordPress admin.

Requirements

• WordPress 6.7 or newer
• PHP 7.4 or newer
• WooCommerce
• An active Quote & Cut account and API key

Optional add-ons

The core Quote & Cut plugin provides the WooCommerce quoting workflow described above when connected to an active Quote & Cut account. Additional manufacturing workflows may be available through separate Quote & Cut add-on plugins distributed outside WordPress.org. Add-on plugins are not bundled with this plugin and are not required to use the core quoting workflow.

External service dependency

This plugin requires an active Quote & Cut account and API key. Core nesting, quote calculation and layout generation are provided by the hosted Quote & Cut service at api.quoteandcut.com and are not performed entirely inside WordPress.

Depending on your workflow and settings, the plugin sends cleaned geometry/job data derived from uploaded DXF files, selected materials, quantities, dimensions, cut metrics, job configuration data, site identifiers and related order or job metadata to Quote & Cut for processing. In the standard workflow, original DXF files are stored on your WordPress site for quote and order reference rather than being sent as raw files to the hosted nesting service.

The plugin also sends your saved API key, a site UUID and your site domain in request headers for licensing, validation, usage tracking and abuse prevention.

The plugin contacts external services only for the features described below. It does not load remote JavaScript or remote executable code. The plugin contacts the following Quote & Cut endpoints:

• https://api.quoteandcut.com/licensing/* – account activation, API key validation, service status and quota/entitlement resolution. Called when an API key or activation token is checked or saved, when service account status is displayed, when the service account status is manually refreshed, and periodically or after cache expiry as needed to keep the connected service account status current.
• https://api.quoteandcut.com/nesting/* – nesting and quote calculation. Called when a customer submits a quote on the frontend. The plugin sends job data required for nesting, which may include geometry, material, sheet, quantity and nesting-configuration data. Active, completed and failed jobs are retained only temporarily by the Quote & Cut API while queued, processed, acknowledged, expired or retained briefly for troubleshooting before automatic removal.
• https://www.quoteandcut.com/exchange-rates/setup-exchange-rates.json – public currency-conversion data used during the setup wizard.

The plugin also exposes one inbound REST endpoint on your WordPress install:

• /wp-json/quoteandcut/v1/license-bump – receives account-status webhooks from api.quoteandcut.com. Requests are verified using an HMAC-SHA256 signature and timestamp check. This endpoint only refreshes the plugin service-status cache; it does not read or modify site content.

Quote & Cut service terms: https://www.quoteandcut.com/terms-conditions/ Quote & Cut privacy policy: https://www.quoteandcut.com/privacy-policy/

The plugin contains admin links to Quote & Cut account, pricing and setup pages. These are normal outbound links opened by the administrator; they are not remote code loads.

Source code for bundled libraries

This plugin bundles third-party browser libraries and locally hosted font files. Readable equivalents or source packages are available as follows:

• Quote & Cut DXF geometry compatibility helper – MIT License. Readable source: assets/js/quoteandcut-dxf-geometry-compat.js; contains the small vector/curve subset used by the first-party assets/js/DXFGeometry.js file, derived from three 0.124.0 source: https://www.npmjs.com/package/three/v/0.124.0
• DXFGeometry.js and all other Quote & Cut PHP, JavaScript, CSS, SVG, PNG and POT files not listed as third-party assets are first-party Quote & Cut files distributed under GPLv2 or later as part of this plugin.
• jsPDF 4.2.1 – MIT License. Minified: assets/vendor/js/jspdf.umd.min.js; readable: assets/vendor/js/jspdf.umd.js; source: https://www.npmjs.com/package/jspdf/v/4.2.1 jsPDF is bundled locally under the MIT licence. Quote & Cut uses jsPDF only to generate and save order parts-list PDFs in the WooCommerce admin. The bundled jsPDF UMD build has been locally patched to remove the unused pdfobjectnewwindow output mode because that mode would otherwise contain a fallback reference to an external PDFObject CDN script.
• dxf-parser 1.1.2 – MIT License. Minified: assets/js/dxf-parser.min.js; readable: assets/js/dxf-parser.js; source: https://www.npmjs.com/package/dxf-parser/v/1.1.2 and https://unpkg.com/dxf-parser@1.1.2/src/
• Inter and Montserrat font files via @fontsource 5.0.17 – SIL Open Font License 1.1. Files are stored in assets/vendor/fonts/; sources: https://www.npmjs.com/package/@fontsource/inter/v/5.0.17 and https://www.npmjs.com/package/@fontsource/montserrat/v/5.0.17

Bundled third-party licenses and first-party asset notes are listed in assets/vendor/THIRD-PARTY-LICENSES.txt.

Privacy

Quote & Cut stores uploaded original DXF files, generated preview images and returned layout files in your WordPress uploads directory. Related job data, quote-context hashes/signatures and file paths may also be stored in WooCommerce cart data, order item meta and plugin settings. Abandoned quote folders not attached to an order are eligible for automatic cleanup after a grace period, currently 48 hours by default. Order files are retained for fulfilment unless manually removed or handled under the store owner’s retention policy.

If diagnostic mode is enabled by the site administrator, additional calculation and pricing breakdown details may be stored and shown to administrators inside WordPress for troubleshooting.

The plugin sends the configured API key, site UUID and site domain to Quote & Cut in request headers for licensing, validation, quota/usage tracking and abuse prevention.

For frontend abuse protection, the plugin uses temporary rate-limit counters keyed by a hash of the visitor IP address plus the site’s Quote & Cut site UUID. Raw IP addresses are not intentionally stored in the database or written to disk by the plugin for this purpose, and the counters expire automatically.

During setup, the plugin may contact the Quote & Cut exchange-rate feed. Public exchange-rate requests may include normal HTTP request metadata and a plugin User-Agent containing the site URL.

The plugin exposes a signed inbound REST webhook endpoint for Quote & Cut account-status change notifications. Valid requests update only the plugin service-status cache.

Site owners should review and update their customer-facing privacy notices before enabling uploads and cloud processing, including what files/order data are collected, what cleaned geometry/job data is sent to Quote & Cut, and how long files are retained.

Service privacy policy: https://www.quoteandcut.com/privacy-policy/ Service terms and conditions: https://www.quoteandcut.com/terms-conditions/