KZB Studio

KZB AI Cart Assistant for WooCommerce connects your store to AI systems using the open Model Context Protocol (MCP). It also adds an optional AI-powered chat widget to your storefront, powered by the WordPress AI Client built into WordPress 7.0.
The guiding principle: automation stops at the cart. The plugin never initiates checkout or processes payments — those actions always require a human.
<h4>What the free version includes</h4>
<ul>
<li>MCP server — REST endpoints that expose your product catalog and allow authenticated AI agents to add products to a customer’s cart (<code>add_to_cart</code>) and view cart contents (<code>view_cart</code>)</li>
<li>Storefront chatbot — floating chat widget powered by the WordPress AI Client; customers can ask product questions and add items to their cart through conversation</li>
<li>Bearer token authentication — per-user tokens that let an AI agent act on a specific customer’s behalf</li>
<li>My Account integration — customers can generate and revoke their own tokens from the My Account page</li>
<li>Admin panel — category filters, security limits (max quantity, max cart value), token management, and an audit log of every AI action</li>
<li>Privacy-first — respects the Global Privacy Control (GPC) signal; no API keys are stored by the plugin</li>
</ul>
<h4>Pro version</h4>
The KZB AI Cart Assistant Pro extension unlocks additional MCP tools and support for variable (configurable) products:
<ul>
<li><code>remove_from_cart</code> — remove a specific product from the cart</li>
<li><code>update_cart</code> — change the quantity of a cart item (quantity 0 removes the item)</li>
<li><code>clear_cart</code> — empty the entire cart</li>
<li>Variable product support — add product variants by specifying a variation ID</li>
</ul>
The Pro extension is available at <a href="https://kzbstudio.pl" rel="nofollow ugc">kzbstudio.pl</a>.
<h4>MCP Server</h4>
AI agents discover the MCP endpoint via a <code><link rel="mcp-server"></code> tag automatically injected into your site’s <code><head></code>. The agent can then browse the product catalog (JSON-LD format) and call tools on behalf of an authenticated customer.
Typical agent flow:
<ol>
<li>Agent reads <code><link rel="mcp-server"></code> from your page HTML</li>
<li><code>GET /wp-json/kzbaca/v1/mcp</code> — reads available tools and the product catalog URL</li>
<li><code>GET /wp-json/kzbaca/v1/mcp/resources</code> — fetches the product list</li>
<li><code>POST /wp-json/kzbaca/v1/mcp/tools/add_to_cart</code> — adds a product (Bearer token required)</li>
<li>Agent returns the cart URL to the customer for payment</li>
</ol>
<h4>External Services</h4>
This plugin connects to external AI services only when the chatbot is enabled and an AI provider is configured in WordPress Settings → AI. No data is sent to any external service when the chatbot is disabled (the default state).
WordPress AI Client 
The storefront chatbot uses the WordPress AI Client (built into WordPress 7.0) to communicate with your configured AI provider. The AI provider and its privacy policy are managed in Settings → AI in your WordPress admin — this plugin does not communicate directly with any AI provider. 
Data sent: conversation messages, product catalog summary, cart context.
No data is ever sent to the plugin author’s servers.

KZB AI Cart Assistant for WooCommerce

Allow AI agents and a storefront chatbot to browse your product catalog and add items to customers' carts. Payment is always completed by a human.

Kevin Pirnie

AI agents — tools like ChatGPT, Claude, Copilot, and the growing ecosystem of autonomous AI systems — are increasingly being pointed at websites to gather information, interact with APIs, and perform tasks on behalf of users. For a site to work well with these agents, it needs to speak the right language: publishing structured discovery files, declaring its capabilities, and responding to agent-specific requests in the right format.
KP Agent Ready handles all of that for your WordPress site. It implements the current set of agent-readiness standards and the broader AI agent ecosystem — without requiring you to manually create files, edit server configs, or touch a line of code. Everything is managed from a dedicated settings page in the WordPress admin.
<h4>What It Does</h4>
RFC 8288 Link Response Headers 
Every response your site sends will include <code>Link</code> headers pointing agents to your API catalog, agent skills index, and MCP server card. This is how agents find your discovery documents without having to guess URLs.
API Catalog — <code>/.well-known/api-catalog</code> 
Publishes a machine-readable catalog of your site’s APIs in the <code>application/linkset+json</code> format defined by RFC 9727. Each entry in the catalog can point to an OpenAPI specification, human-readable documentation, and a health/status endpoint. If you have not configured any entries yet, the plugin serves a sensible fallback automatically so the endpoint is always valid.
Agent Skills Index — <code>/.well-known/agent-skills/index.json</code> 
Publishes a skills discovery index per the Agent Skills Discovery RFC v0.2.0. This tells agents what your site can do — search your blog, browse your portfolio, submit a contact form, and so on.
Skills are built from three sources:
<ul>
<li>Blog articles — a search skill and a browse skill, toggled with a single switch</li>
<li>Custom post types — any public CPT registered on your site appears as a checkbox; tick it and it gets a browse skill pointing to its archive</li>
<li>Manual entries — define any additional skill with a name, type, description, URL, and an optional sha256 digest</li>
</ul>
MCP Server Card — <code>/.well-known/mcp/server-card.json</code> 
Publishes an MCP Server Card (SEP-1649) identifying your site to Model Context Protocol clients. Configurable name, version, description, transport endpoint, and a capability list. If you do not have an MCP server running yet, just leave the transport blank — the card is still valid and useful for discovery.
OAuth / OIDC Discovery — <code>/.well-known/openid-configuration</code> or <code>/.well-known/oauth-authorization-server</code> 
If your site exposes protected APIs that require authentication, this feature publishes the discovery metadata agents need to authenticate. Supports both OpenID Connect Discovery 1.0 and RFC 8414. Disabled by default — only enable it if you have the infrastructure in place.
OAuth Protected Resource Metadata — <code>/.well-known/oauth-protected-resource</code> 
Complements the OAuth/OIDC feature by publishing RFC 9728 Protected Resource Metadata. Disabled by default.
robots.txt Content Signals 
Appends Content Signals directives to your <code>robots.txt</code> file, declaring your preferences for how AI systems may use your content:
<ul>
<li>ai-train — whether AI companies may use your content to train models</li>
<li>search — whether search engines may index your content</li>
<li>ai-input — whether AI retrieval systems (RAG) may use your content as input</li>
</ul>
Markdown Negotiation 
When an AI agent sends a request with the <code>Accept: text/markdown</code> header, the plugin intercepts the response for singular posts and pages and returns a clean Markdown version of the content. Regular browser requests are completely unaffected.
WebMCP 
Injects a small JavaScript snippet into your page footer that calls <code>navigator.modelContext.provideContext()</code>, exposing your site’s key actions as tools to AI agents running in the browser. Built-in tools include blog search, portfolio navigation, and contact page navigation — each individually toggleable.
llms.txt and llms-full.txt 
Generates physical <code>/llms.txt</code> and <code>/llms-full.txt</code> files in your WordPress web root per the <a href="https://llmstxt.org" rel="nofollow ugc">llmstxt.org</a> specification. These files give AI systems a structured, readable index of your site’s content — who you are, what pages exist, and what your posts are about.
<pre><code>llms.txt contains your site header and a clean list of links by content type. `llms-full.txt` contains the same structure but expands each entry with an excerpt or truncated content block so AI systems can understand the content without fetching every URL.
</code></pre>
Files are regenerated automatically when posts are published, unpublished, or trashed, and whenever settings are saved. A manual Regenerate button is available in the llms.txt settings tab. If your host prevents direct file writes, the generated content is displayed in the admin as a copyable textarea so you can create the files manually.
Configurable options include a custom intro block, toggling pages and posts independently, selecting additional custom post types, setting the excerpt word limit for <code>llms-full.txt</code>, and defining optional additional links that appear under an <code>## Optional</code> section in both files.
<h4>Developer Filters</h4>
Two filters let themes and other plugins extend the plugin’s output without touching settings:
<pre><code>kp_agent_skills — add entries to the agent skills index:

add_filter( 'kp_agent_skills', function ( array $skills ): array {
 $skills[] = [
 'name' => 'my-skill',
 'type' => 'api',
 'description' => 'Does something useful.',
 'url' => 'https://yoursite.com/api/endpoint',
 ];
 return $skills;
} );

kp_webmcp_tools — add tools to the WebMCP context:

add_filter( 'kp_webmcp_tools', function ( array $tools ): array {
 // $tools is the PHP array that becomes the JS tools array
 return $tools;
} );
</code></pre>

KP Agent Ready

Very good for AI

Make your WordPress site discoverable and usable by AI agents via well-known endpoints, MCP, OAuth, and Markdown negotiation.

KZB AI Cart Assistant for WooCommerce vs KP Agent Ready