AVA Pay For WooCommerce Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
AI agents are already shopping your store. ChatGPT browses product pages, agentic checkouts are rolling out across the ecosystem. AVA Pay tells you which agents to trust, lets you set the rules, and records every verification and attributed order so you can see the traffic when reporting lands.
This plugin connects your WooCommerce store to the AVA Pay verification API, which cryptographically verifies agent traffic across protocols (Visa Trusted Agent Protocol, IETF Web Bot Auth, Google AP2) through a single endpoint.
What it does
- Adds a verify endpoint (
/wp-json/ava-pay/v1/verify-agent) that proxies signed agent requests to the AVA Pay API. Signatures are verified server-side against the agent platforms’ published keys. - Applies YOUR policy: accept/reject verified agents, per-platform allow/challenge/block rules, discount caps, and spend limits, kept as a portable JSON policy document.
- Optionally mints a single-use, expiring WooCommerce coupon for verified agents.
- Records every verification and every attributed order in local database tables. (This version records the data; a traffic/revenue dashboard is planned, and nothing is displayed yet.)
Trust model, honestly stated
- Verification proves agent identity and request integrity. A discount is only granted beyond your identity-only tier when the request carries a buyer mandate.
- Everything fails closed: if the verification API is unreachable, agents are not admitted (and the outcome is recorded as an error).
- We do not claim to have blocked an agent we never managed to check. When the verification API cannot reach an agent’s trust root, the request is still not admitted, but it is recorded as
unverifiablerather than as a rejection, and the storefront response saysverification_unavailableinstead ofagent_blocked. - The plugin never blocks human shoppers. A failed agent verification means “no discount, proceed normally.”
External services
This plugin connects to the AVA Pay verification API, operated by Agentic Verification Architecture LLC, to check whether an AI agent’s signed request is genuine. Your store cannot verify agent signatures on its own; this API does the cryptographic check against the agent platforms’ published keys.
- Service: AVA Pay verification API. The plugin sends
POST https://pay.avalayer.com/verify. The base URL is the “AVA Pay API URL” setting (defaulthttps://pay.avalayer.com) and can also be changed with theava_pay_api_urlfilter. - When data is sent: only when a request is POSTed to the plugin’s verify endpoint,
/wp-json/ava-pay/v1/verify-agent, and passes the local rate limit. That endpoint is how signed agent requests reach the plugin, either directly from the agent or from the storefront script on a page view that carries agent signature parameters. The plugin forwards each such request as received and lets the API decide; a request without valid signature material is rejected there. Nothing is sent on ordinary page views, in the admin, or during checkout. - What is sent: the incoming request’s HTTP method; the canonical URL of the verify endpoint, built from your site’s own address rather than from the incoming request; the request headers as received, with
Cookie,AuthorizationandX-WP-Nonceremoved andHostreplaced by your site’s own host; and the request body, if there is one. The forwarded headers are whatever the caller sent, such as the agent’s signature headers andUser-Agent, plus any headers your web server or a proxy in front of it adds before WordPress sees the request (for exampleX-Forwarded-For). - What is not sent: no customer, order, or session data. No cookies, no logged-in user information, no cart contents, and no store settings or policy.
Terms of service: https://avalayer.com/terms
Privacy policy: https://avalayer.com/privacy
Screenshots
No screenshots provided
