CanItBuy Agent Ready

Description

Shoppers now ask ChatGPT, Perplexity, Claude or Gemini what to buy, and some let an AI agent go to the store and add the product to the cart. CanItBuy Agent Ready shows what happens in your WooCommerce store when they do, and what to fix.

AI agent visits. Counts visits from AI agents and crawlers that say who they are: ChatGPT agent (signed requests), ChatGPT-User, OAI-SearchBot, GPTBot, Claude-User, Claude-SearchBot, ClaudeBot, Perplexity, Meta, Amazon and more. You see which agents read product pages and which reach the cart and checkout. Visits are counted per day, without IP addresses, and ordinary visitors are never recorded.

Signed agents, confirmed. Agents such as ChatGPT agent sign their requests with a public key (Web Bot Auth, HTTP Message Signatures). Turn on “Check agent signatures” and the plugin confirms each signature, so you can tell real agents from visitors that only borrow their name. Off by default.

Agent journeys. Follows declared shopping agents, such as ChatGPT agent, from the first product they put in the cart to the order: how far each one got, what was in its cart, where it stopped and the last message your store showed it (“Please choose product options”, “Billing Phone is a required field”). You see the value left in carts that did not become orders, and the store messages that stop agents most often.

Rules for AI agents. Decide what agents may do: stop visitors that use an agent’s name with a wrong signature, let only agents with a confirmed signature check out, or let agents fill the cart while the person places the order. Off by default; nothing changes for people.

Compared with other stores (optional). Join the CanItBuy store network and see how your store compares with other WooCommerce stores: AI agent visits, shopping agents that reach checkout, the share of orders from AI assistants, catalog readiness and what stops agents most often. Off until you click “Join and compare”; before that you see exactly what would be shared. Once a week the plugin sends last week’s totals with a random id instead of your store address, and never anything about visitors or customers, product names, prices or order amounts. Comparisons appear when at least 5 stores share the same week, and leaving deletes everything your store sent.

Sales from AI. Sums the orders that AI assistants sent to you, using WooCommerce order attribution (chatgpt.com, perplexity.ai, claude.ai, gemini.google.com, copilot and others), and marks orders placed by an AI agent itself.

Catalog audit. Checks every product and variation for what an agent needs to recommend it and buy the right variant: price, variations with an “Any” attribute, GTIN / EAN with check digit validation, image, description, SKU, brand and category. Each issue says what it costs you and how to fix it. Export the list to CSV for your team.

Feed vs store. Compares your Google Merchant Center feed (RSS or Atom) or Ceneo XML with the store: price, availability, GTIN and currency, plus products in stock that the feed leaves out.

Page and robots.txt. Reads robots.txt the way AI bots do and shows which of them may read your home page and product pages. Fetches a few product pages and compares the product data on the page (JSON-LD) with WooCommerce, to catch stale caches and plugins that output a second, different price.

Fixes, off until you turn them on.

  • Add the GTIN from WooCommerce or popular EAN plugins to product data.
  • Add the brand from WooCommerce Brands or a brand attribute.
  • Add your return window and delivery cost and time to every offer.
  • Let AI search and assistant bots read products when robots.txt shuts them out, keeping your other rules and never touching bots you named yourself.

The plugin is in English and ready for translation on translate.wordpress.org.

Test with a real AI agent

The plugin measures your store from the inside. To watch a real AI agent try to buy in your store, with a recording and a score, run a test on canitbuy.com.

Privacy

  • Only declared AI agents and crawlers are counted, as daily totals per agent and store area, with the page path but without the query string, IP address or any visitor identifier.
  • For declared shopping agents the plugin keeps a short journey: the agent’s name, the time, how far it got (cart, checkout, order), the number of items and the cart value, the last page path and the last message the store showed it, with e-mail addresses and long numbers masked. No IP address and no customer data. The journey is linked through the cart session WooCommerce already uses; the plugin sets no cookie of its own. Journeys are deleted after 180 days.
  • Orders placed by an AI agent get a private order note with the agent’s name (for example “chatgpt-agent”).
  • Unless you join the store network, nothing is sent to CanItBuy or anyone else. The page, robots.txt and feed checks are requests from your server to your own store or to the feed address you enter, made only when you click.
  • If you join the store network, the plugin sends canitbuy.com last week’s totals once a week (see External services). The report carries a random id, not your store address, and contains no data about visitors or customers, no product names, prices or order amounts and no text of store messages. Leaving the network deletes every report your store sent.
  • With “Check agent signatures” on, your server downloads the public key of an agent that signs its request, at most once a day per agent. No store or visitor data is sent.

External services

With its default settings the plugin does not call external services on its own.

  • Key directories of signing AI agents (optional, off by default). When you turn on “Check agent signatures” and an AI agent sends a signed request, the plugin downloads that agent’s public key from the address named in the request’s Signature-Agent header (for example https://chatgpt.com/.well-known/http-message-signatures-directory), at most once a day per agent and at most 20 new addresses an hour. No store or visitor data is sent apart from a standard HTTP request. The key belongs to the agent’s operator; for ChatGPT agent that is OpenAI: Terms of use, Privacy policy.
  • canitbuy.com store network (optional, off by default). Only after you click “Join and compare” under WooCommerce > CanItBuy > Other stores, the plugin sends last week’s totals to https://canitbuy.com/api/sensor once a week and receives the combined numbers of all stores in return. What is sent: AI agent visits per agent and store area; how many shopping agent journeys reached the cart, checkout and an order, and the kind of message that stopped them; the share of orders referred by AI assistants and the number placed by agents; results of your last catalog, page and feed checks as percentages; country, currency, language, catalog size as a range, WordPress, WooCommerce and plugin versions; which of the plugin’s options are on; and a random id. The request uses the plugin’s own user agent, without your site address. The exact report is shown on the Other stores screen. “Leave the network” deletes everything your store sent. Reports are kept for 26 weeks. Terms, Privacy policy.
  • Your product feed. When you click “Check feed”, the plugin downloads the feed from the address you enter. Usually that is your own store. No data is sent apart from a standard HTTP request.
  • canitbuy.com. The “Test with a real AI agent” button is a link that opens canitbuy.com in your browser with your store’s domain filled in. Nothing is sent until you start a test there. Terms, Privacy policy.

Installation

  1. Install and activate the plugin. WooCommerce 8.5 or newer is required.
  2. Go to WooCommerce > CanItBuy.
  3. Click “Check the catalog”, then check your pages and your feed.
  4. Turn on the fixes you need under “Fixes and settings”.

FAQ

Why do I see no AI visits?

Counting starts when the plugin is activated. If your store uses a page cache, cached pages are served without WordPress and are not counted; cart and checkout are usually not cached, so buying attempts are.

Can it recognise every AI agent?

No. Agents that run in a normal browser and do not identify themselves, such as Claude in Chrome or Comet, look like people. ChatGPT agent signs its requests and is recognised. Any visitor can pretend to be someone else, so the numbers are declared visits, except for signed visits confirmed with “Check agent signatures”.

What is an agent journey?

When a declared shopping agent (for example ChatGPT agent, which signs its requests) adds a product to the cart, fails to, or opens the checkout, the plugin follows it to the order or to the point where it stopped. Ordinary visitors are never followed. A stop at checkout is not always a lost sale: ChatGPT agent asks the person before it pays.

Can I stop AI agents from buying?

Yes, under Fixes and settings > Rules for AI agents. You can stop visitors that use an agent’s name with a wrong signature, let only agents with a confirmed signature check out, or let no agent check out. The agent gets a clear message and the refusal shows in Agent journeys. People are never affected.

What does joining the store network share?

Last week’s totals: AI agent visits, how far shopping agents got and the kind of message that stopped them, the share of orders from AI assistants, and the results of your last checks as percentages, with a random id instead of your store address. Never your store address, visitors, customers, product names, prices, order amounts or the text of messages. You see the exact report before you join, and leaving deletes it. The combined numbers of all stores are public at canitbuy.com/pulse, but only for weeks with at least 5 stores, so no single store can be read from them.

Does it change my product pages?

Not by default. The fixes add facts to the structured data WooCommerce already outputs, and only when you turn them on.

My SEO plugin outputs its own product data.

The fixes apply to WooCommerce product data. The page check shows if two plugins output different prices; then turn off product schema in one of them.

Does it work with HPOS and the block checkout?

Yes. Orders are read through the WooCommerce API, and orders placed through the block checkout (Store API) are marked too.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“CanItBuy Agent Ready” is open source software. The following people have contributed to this plugin.

Contributors

Translate “CanItBuy Agent Ready” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.3.0

  • New: Other stores. Join the CanItBuy store network (off by default) and compare your store with other WooCommerce stores. You see the exact report before joining; leaving deletes it.
  • Agent journeys sort each stop into a kind of message (options, stock, required field, shipping and others) for the comparison, without sharing the text.

1.2.0

  • New: Agent journeys. Follow declared shopping agents through the cart, checkout and order, with the value left in carts and the store messages that stopped them.
  • New: Rules for AI agents. Stop visitors with a wrong agent signature, let only confirmed agents check out, or let no agent check out. Off by default.
  • The overview shows shopping agents next to visits and sales.

1.1.3

  • Page check: a product without a price now says so, instead of blaming the theme for the missing product data.

1.1.2

  • The plugin name is now CanItBuy Agent Ready, the same as its WordPress.org address. Nothing else changed.

1.1.1

  • Tested with WordPress 7.1.
  • The overview marks agent visits whose signature was confirmed.

1.1.0

  • New: “Check agent signatures” (off by default) confirms Web Bot Auth signatures of agents such as ChatGPT agent and marks visits as “Signature confirmed” or “Signature not confirmed”.
  • New: CanItBuyBot, the CanItBuy scanner, is recognised alongside the CanItBuy test agent.
  • Orders placed by an AI agent also record whether its signature was confirmed.

1.0.0

  • First release: AI agent visits, sales from AI, catalog audit with CSV, feed vs store (Google, Ceneo), robots.txt and page data check, structured data fixes. English and Polish.