=== MCPify – AI Connector for WooCommerce ===
Contributors: mcpify
Tags: ai, mcp, claude, chatgpt, woocommerce
Requires at least: 6.5
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.6.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Connect Claude, ChatGPT, Cursor and Codex to your WooCommerce store, with permissions, locks for prices and customer data, and an audit log.

== Description ==

MCPify connects AI clients to your WooCommerce store through the Model Context Protocol (MCP). You decide per connection what an AI client may do:

* Permissions per store area: products, categories, inventory, orders, customers, coupons, reviews, pages, media, menus, shipping and taxes.
* Locks for price changes, refunds, permanent deletes and customer data (names, addresses, email, phone and IP addresses are redacted while it is off).
* An audit log of every request, including blocked ones.
* Skills: reusable instructions for catalog audits, product copy, SEO and alt text.
* Sign-in for AI clients through your WordPress admin: when an AI client asks for access, you approve it on this plugin's page and choose which connection it gets. No API keys to copy.

This plugin connects your store to the MCPify service. The AI clients talk to MCPify, never directly to your store.

== External services ==

This plugin connects your store to MCPify for WooCommerce, a service run by the MCPify team at https://woo.getmcpify.app. The service is needed for what the plugin does: it receives the requests of the AI clients you connect, checks them against the rules you set and forwards the allowed ones to your store's WooCommerce REST API.

What is sent and when:

* Nothing is sent before you connect your store on the plugin's page (WooCommerce › MCPify).
* When you connect: your site address, the store name, your WordPress, WooCommerce and plugin versions, your WordPress user ID, and a WooCommerce REST API key that you approve on WooCommerce's own approval screen. The plugin and MCPify also agree on a random secret that signs their messages.
* When you open the MCPify dashboard from the plugin, or continue from this page to approve an AI client: a short-lived, signed sign-in token with your WordPress user ID, display name, email address and role.
* While a connection is active: the AI clients' requests reach your store through the REST API key; the data your store returns passes through MCPify to the AI client. Requests with this key never get the unfiltered_html or unfiltered_upload capabilities, so content written by AI clients is filtered like an author's.
* When you open the plugin's page while connected: a signed status request (at most every five minutes).
* When you open the plugin's page after starting to connect, until the attempt completes or after 30 minutes: a request that asks why the attempt did not complete, with a hash of the attempt's random one-time value (no other data).
* When you disconnect or deactivate the plugin: a notice that the store is disconnected.

The plugin adds one public REST route, /wp-json/mcpify/v1/consent. It only forwards a visitor to the MCPify page in this site's admin (where WordPress asks for a login), so MCPify can send you there when you approve an AI client. It reads nothing and changes nothing.

Terms of service: https://woo.getmcpify.app/terms
Privacy policy: https://woo.getmcpify.app/privacy

== Installation ==

1. Install and activate the plugin. WooCommerce must be active.
2. Open WooCommerce › MCPify and choose Connect to MCPify (administrators only).
3. Approve the WooCommerce REST API key for MCPify on WooCommerce's own approval screen.
4. Open MCPify from the same page to set up connections for your AI clients.

Disconnecting or deactivating the plugin deletes MCPify's API key and tells MCPify that the store is disconnected.

== Frequently Asked Questions ==

= Is MCPify free? =

The plugin is free. The MCPify service has a free plan; paid plans add write access, more connections and skills.

= Which AI clients work? =

Every client that supports remote MCP servers, for example Claude, ChatGPT, Cursor and Codex. Setup guides: https://woo.getmcpify.app/connect-ai-to-woocommerce

= Can shop managers use it? =

Shop managers can open the MCPify dashboard and approve AI clients for existing connections (for 7 days). Only administrators can connect the store, create connections and change permissions.

== Changelog ==

= 0.6.0 =
* When connecting fails, the MCPify page explains why (for example no HTTPS, the REST API blocked by a security plugin, or the site cannot reach MCPify) and what to change.
* Next steps after connecting, until the first AI client can connect, and the number of active AI connections.
* Disconnecting asks for confirmation first.

= 0.5.0 =
* Security: requests with MCPify's API key never get the unfiltered_html and unfiltered_upload capabilities. Content written by AI clients is filtered like an author's (no scripts), and uploads are limited to the file types WordPress allows by default.

= 0.4.0 =
* Approve AI clients in the WordPress admin: MCPify's sign-in page forwards to the MCPify page here, which continues to MCPify with single sign-on.

= 0.3.0 =
* MCPify's own API key can read pages, posts, media and menus through the WordPress REST API, with the permissions of the administrator who approved it. Keys of other apps are not affected.

= 0.2.0 =
* Connect the store to MCPify through WooCommerce's key approval, open the MCPify dashboard with single sign-on, disconnect.
* Deactivating the plugin disconnects the store and deletes MCPify's API key.

= 0.1.0 =
* First version: status page under WooCommerce › MCPify.
