Title: HitlGate Order Review for WooCommerce Author: mike36292 Published: August 25, 2026 Last modified: August 25, 2026 --- Search plugins ![](https://ps.w.org/hitlgate-order-review/assets/banner-772x250.png?rev=3664561) ![](https://ps.w.org/hitlgate-order-review/assets/icon-256x256.png?rev=3664561) # HitlGate Order Review for WooCommerce By [mike36292](https://profiles.wordpress.org/mike36292/) [Download](https://downloads.wordpress.org/plugin/hitlgate-order-review.1.0.2.zip) * [Details](https://wordpress.org/plugins/hitlgate-order-review/#description) * [Reviews](https://wordpress.org/plugins/hitlgate-order-review/#reviews) * [Installation](https://wordpress.org/plugins/hitlgate-order-review/#installation) * [Development](https://wordpress.org/plugins/hitlgate-order-review/#developers) [Support](https://wordpress.org/support/plugin/hitlgate-order-review/) ## Description HitlGate Order Review for WooCommerce helps store operators pause and review risky WooCommerce orders before fulfillment or money-moving actions. This plugin is not affiliated with AgentOps (agentops.ai), WordPress, WooCommerce, or Automattic. **Core HITL (works without any required external SaaS)** * Intake thresholds enqueue orders (minimum amount, AOV spike, optional gateway risk meta, force meta). * Masked evidence packs for reviewers (PII redacted where applicable). * Admin queue under **WooCommerce HitlGate Order Review**. * Money-moving actions (cancel, partial refund) use a single-use confirm token and the `agentops_confirm_money` capability. * Intake is fail-open: exceptions are logged and never block checkout. **Optional integrations** * **WooCommerce MCP / WordPress Abilities** — expose review tools to Cursor/Claude when Woo MCP is enabled. * **Natural-language settings** — optional; uses the WordPress AI Client / Connectors( no direct third-party API keys in this plugin). * **Readiness connector** — optional inbound HMAC webhook to store a catalog readiness summary. * **WooCommerce Subscriptions** — soft dependency for failed renewal / on-hold enqueue and confirm-gated pause/cancel. ### External services This plugin can optionally connect to third-party services. Core order review does** not** require any external service. #### WordPress AI Client / Connectors (optional) Used only if you use natural-language settings proposals. * **What it is used for:** Turning a plain-language settings request into a proposed settings diff for you to preview and confirm. * **What data is sent:** The settings schema description and your natural-language prompt are sent through the WordPress AI Client to whichever AI provider you configured under **Settings Connectors**. Order customer PII is not sent by this feature. * **When:** Only when an administrator submits a natural-language settings proposal. * **Default:** No AI provider is called until you configure a connector (for example OpenAI, Anthropic, or Google provider plugins) under Settings Connectors. This plugin does **not** store third-party AI API keys or call provider endpoints directly. * Follow the terms and privacy policy of the AI provider you connect via Connectors. #### Optional readiness summary webhook (optional) If you configure a webhook secret, an external readiness scanner you control may POST a catalog readiness summary into your site. * **What it is used for:** Showing a readiness score in evidence packs and optionally influencing intake when you lower the critical-SKU threshold. * **What data is sent:** Your site does not initiate outbound catalog scans from this plugin. The external service (if you use one) may read public/product data according to that service’s own setup; this plugin only accepts an inbound signed summary. * **When:** When the configured service posts to `/wp-json/agentops/v1/readiness- summary`. * Document the terms and privacy policy of whichever readiness service you connect. This plugin does not require a specific vendor. ## Screenshots [⌊Review queue listing pending high-risk orders.⌉⌊Review queue listing pending high- risk orders.⌉[ Review queue listing pending high-risk orders. [⌊Order metabox showing a masked evidence pack.⌉⌊Order metabox showing a masked evidence pack.⌉[ Order metabox showing a masked evidence pack. [⌊Confirm gate flow for draft cancel or partial refund.⌉⌊Confirm gate flow for draft cancel or partial refund.⌉[ Confirm gate flow for draft cancel or partial refund. [⌊Settings screen for intake thresholds and token TTL.⌉⌊Settings screen for intake thresholds and token TTL.⌉[ Settings screen for intake thresholds and token TTL. [⌊Optional MCP / Abilities tool flow for agent-assisted review.⌉⌊Optional MCP / Abilities tool flow for agent-assisted review.⌉[ Optional MCP / Abilities tool flow for agent-assisted review. ## Installation 1. Upload the `hitlgate-order-review` folder to `/wp-content/plugins/` (or install the zip via **Plugins Add New Upload Plugin**). 2. The release zip already includes Composer autoload under `vendor/` — you do **not** need to run `composer install` on the server. 3. Activate **WooCommerce**, then activate **HitlGate Order Review for WooCommerce**. 4. Administrators receive the `agentops_confirm_money` capability on activation. 5. Open **WooCommerce HitlGate Order Review Settings** and set intake thresholds. ## FAQ ### Does this plugin require an external SaaS? No. Core human-in-the-loop review works plugin-only. Natural-language settings use the WordPress AI Client if you configure a provider under Settings Connectors. The readiness webhook is optional. ### What are the requirements? WordPress 6.9+, PHP 8.1+, and WooCommerce 10.3+. WooCommerce Subscriptions is optional. ### Who can confirm cancel or refund actions? Users with the `agentops_confirm_money` capability (granted to administrators on activation). ### Does uninstall delete my data? By default, uninstall keeps plugin tables and options. To drop data on uninstall, set option `agentops_remove_data` to a truthy value first (example: `wp option update agentops_remove_data 1`). ### What data leaves my site? By default, none for core HITL. If you use natural-language settings, prompts are sent via the WordPress AI Client to the provider configured under Settings Connectors. See **External services**. ### How do I use MCP / Cursor? Enable WooCommerce MCP per WooCommerce docs, point your MCP client at the store endpoint, then use the registered abilities (list queue, evidence, draft cancel/ refund, confirm-action, settings propose/apply). ## Reviews There are no reviews for this plugin. ## Contributors & Developers “HitlGate Order Review for WooCommerce” is open source software. The following people have contributed to this plugin. Contributors * [ mike36292 ](https://profiles.wordpress.org/mike36292/) [Translate “HitlGate Order Review for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/hitlgate-order-review) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/hitlgate-order-review/), check out the [SVN repository](https://plugins.svn.wordpress.org/hitlgate-order-review/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/hitlgate-order-review/) by [RSS](https://plugins.trac.wordpress.org/log/hitlgate-order-review/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.2 * Natural-language settings now use the WordPress AI Client / Connectors instead of a direct third-party HTTP client. * Removed plugin settings fields for LLM base URL, model, and API key. #### 1.0.1 * Plugin Check fixes: output escaping, prepared SQL claim path, ABSPATH guard. * WordPress.org review follow-up packaging. #### 1.0.0 * First WordPress.org submission as HitlGate Order Review for WooCommerce. * Human-in-the-loop intake, review queue, masked evidence packs, and Admin UI. * Confirm-token gate for cancel and partial refund. * Optional readiness HMAC webhook connector. * Optional natural-language settings propose apply. * Optional WooCommerce Subscriptions HITL. * Public abilities for WooCommerce MCP clients. ## Meta * Version **1.0.2** * Last updated **3 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.9 or higher ** * Tested up to **7.0.4** * PHP version ** 8.1 or higher ** * Tags * [fraud prevention](https://wordpress.org/plugins/tags/fraud-prevention/)[mcp](https://wordpress.org/plugins/tags/mcp/) [order management](https://wordpress.org/plugins/tags/order-management/)[woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/hitlgate-order-review/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/hitlgate-order-review/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/hitlgate-order-review/reviews/) ## Contributors * [ mike36292 ](https://profiles.wordpress.org/mike36292/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/hitlgate-order-review/)