AI Agent OS
MCP Governance
for WordPress AI Agents
AI Agent OS lists every tool your plugins give AI agents, rates each one by risk, and lets you choose exactly which tools each agent may use. Customer details stay hidden from agents that don't need them, and every action is logged.
Version 1.0.0 PHP 8.0+ Tested with WooCommerce 11 WordPress 6.9+
THE SECURITY DILEMMA
AI agents are powerful. Unguarded agents are a liability.
When you connect an AI agent to your WordPress site, it can call any plugin's tools — read customer data, modify orders, cancel subscriptions, issue refunds. Without governance, one misconfigured prompt or compromised token puts your entire store at risk.
Without AI Agent OS
- Unrestricted Tool Execution
A connected AI can use every tool your plugins expose, including ones that delete orders or products.
-
Unchecked Financial Risk
Agents can trigger refunds, cancel paid recurring subscriptions, or alter order prices without requiring human confirmation.
- Blind Spot & Zero Auditability
No record of which AI app did what, when it happened, or what it tried and was refused.
- All-or-Nothing Agent Keys
A single compromised developer key gives attackers complete run of your WordPress installation and customer data.
With AI Agent OS
-
Granular Permission Matrix
Authorize every single tool explicitly. Grant read access to customer service agents while blocking refunds and destructive operations.
- Automated Risk Tiering
Tools are automatically classified into three risk tiers — Read, Write, and Destructive. Destructive actions (deletes, refunds, cancellations) are blocked by default and require a site-wide unlock plus explicit per-agent opt-in before any agent can invoke them.
- Complete Activity Log
Every call is recorded: which agent, which AI app, which tool, what happened, how long it took, and the reason for every refusal. Full requests and replies are kept only if you switch that on, with passwords and personal details removed.
- Multi-Agent OAuth 2.0 + PKCE Profiles
Each agent has its own connection address. Connect Claude, ChatGPT, Codex or a script as separate agents, each with its own permissions, and revoke one without touching the others.
How AI Agent OS Governs Your Store
Create an agent, choose its permissions and connect your AI app. From then on, every request from that AI is checked.
Auto-Discovery
Reads tool registrations from installed WordPress plugins via the Abilities API - no scanning or crawling. Every ability declared by a plugin is automatically inventoried.
Risk Classification
Every tool is rated Read, Write or Destructive based on what it can change. You can change any tool's rating under Settings → Tool risk levels.
Policy Enforcement
When Claude, ChatGPT or any MCP client asks to use a tool, AI Agent OS checks the agent's permission, runs or refuses the call, and writes it to the activity log.
Governance Built for WordPress and WooCommerce
Purpose-built security architecture engineered specifically for WordPress and WooCommerce stores.
Permissions per Agent, per Tool
Set every tool to None, Read or Write for each agent, grouped by plugin. Give an inventory bot permission to update stock without letting it see customer addresses.
Three-Tier Risk Classification
Tools are automatically classified as Read, Write, or Destructive. Destructive actions are blocked by default and require a site-wide unlock plus per-agent opt-in before any agent can invoke them.
Full Activity Log
Every AI operation with its time, agent, app, tool, outcome and speed, plus a 30-day summary. Export to CSV.
Multi-Agent Support & OAuth
Connect Claude, ChatGPT, Codex or any MCP client. Each agent signs in with its own OAuth 2.0 + PKCE connection, so you can revoke one without touching the others.
Native WooCommerce Ecosystem
Works with WooCommerce's own AI tools and AST PRO out of the box, and with any plugin that registers WordPress abilities. Compatible with HPOS and the classic order storage. Older integrations can use governed WooCommerce API keys.
The Three-Tier Risk Classification Matrix
Every tool is rated automatically. An agent still needs your permission before it can use any tool.
| Risk Level | Definition | Example Tools | WHAT AN AGENT NEEDS |
|---|---|---|---|
| Read | Looks things up without changing anything | woocommerce/orders-query, woocommerce/products-query, ast-pro/get-tracking | A Read permission |
| Write | Creates or changes data: adding tracking, adding order notes, updating order status. | ast-pro/add-tracking, woocommerce/order-add-note, woocommerce/order-update-status | Write permission |
| Destructive | Deletes, cancels or refunds, and cannot be undone. | woocommerce/product-delete, ast-pro/delete-tracking | A Write permission plus the site-wide switch and the agent's switch (both off by default) |
WORKS WITH
Benefits of AI Agent OS
Everything you need to master and safeguard AI agents on WooCommerce.
Automatic Tool Discovery
Finds every tool your plugins offer AI agents, with no setup.
Ready-made Agent Profiles
Support, Shopping, Fulfillment, Supplier and Store Admin agents, set up in one click.
Destructive Double Opt-In
Requires site-wide unlock plus per-agent permission for dangerous actions.
OAuth 2.0 + PKCE Sign-in
Connect an AI app by signing in and approving one screen. No token to copy.
Real-Time Activity Log
Logs every tool call and refusal, with the agent, the app, the outcome and the speed.
Business Brain Grounding
Grounds AI models in store policies, shipping guidelines, and internal SOPs.
Business Skills
Drafts short manuals that teach agents how to use your plugins' tools. Each one waits for your approval.
PII & Customer Redaction
Masks customer names, emails, phone numbers and addresses for any agent that doesn't act for you.
WooCommerce HPOS Compatible
Works with High-Performance Order Storage and with the classic order storage.
AI Agent OS vs. Unguarded AI Agents
See what changes when AI agents work through AI Agent OS.
| Features | Unguarded MCP | AI Agent OS |
|---|---|---|
| Every plugin tool listed in one place | Not included | Included |
| Every tool rated Read, Write or Destructive | Not included | Included |
| Delete, cancel and refund tools locked by default | Not included | Included |
| Separate sign-in and permissions for each agent | Not included | Included |
| Activity log of every call and refusal | Not included | Included |
| Customer details hidden from agents that don't need them | Not included | Included |
| None, Read or Write permission for every tool | Not included | Included |
| Ready-made agent profiles | Not included | Included |
| Same permissions for WooCommerce API keys | Not included | Included |
| Answers from your store policies and documents (Business Brain) | Not included | Included |
Experience the full power and security of AI Agent OS. | Default | Get AI Agent OS |
Frequently Asked Questions
Explore Other Zorem Plugins
Zorem builds a connected set of WooCommerce plugins: fulfillment and post-purchase tools for everything after the order, and store management tools for running the shop behind it. Trusted by over 80,000 store owners.
Advanced Shipment Tracking Pro
The Most Powerful Fulfilment Manager for WooCommerce. AST PRO provides powerful features to easily add tracking info to WooCommerce orders, automate the fulfillment workflows and keep your customers happy and informed.
Advanced Local Pickup Pro
The Advanced Local Pickup (ALP) plugin helps you handle store pickup more conveniently by extending the WooCommerce Local Pickup shipping method and creating a local pickup fulfillment workflow, allows you to set up multiple pickup locations, pickup per item, products availability per location, force local pickup, pickup appointments, and more!
Returns for WooCommerce
Streamline your returns process and improve customer satisfaction with Returns for WooCommerce, the returns & exchanges management plugin for WooCommerce. With a customizable returns & exchanges center, automated workflows, and a centralized returns & exchanges dashboard, this comprehensive solution makes it easy to manage returns and exchanges for your online store.
SMS for WooCommerce
Send order updates to your customers via SMS notifications when their order or shipment status are updated in your WooCommerce store, Customers can opt-in to receive SMS during the checkout process and admins can receive SMS notifications when a customer places a new order or when a stock level is low.
Customer Email Verification for WooCommerce
The Customer Email Verification helps WooCommerce store owners to reduce registration and spam orders by requiring customers to verify their email address when they register an account or before they can place an order on your store.
Country Based Restriction for WooCommerce
The Country Based Restriction (CBR) uses the WooCommerce Geolocation and allows you to restrict products and payment gateways based on the customer country.