webexpertdev

<p>WebExpertDev AI Customer Support Assistant for stores using WooCommerce exposes lightweight, token-protected REST/OpenAPI tools that compatible AI support platforms can use for customer-safe product and order support. It is not a chatbot and does not include an AI model. It provides WooCommerce OpenAPI tools, setup assets, generated instructions, and admin configuration screens for stores that connect those tools to a compatible chat or AI assistant platform.</p>
<p>Tawk.to compatibility: this plugin is Tawk.to Ready today and works with Tawk.to AI Assist compatible OpenAPI setup. It is also OpenAPI-compatible by design for AI assistants that support OpenAPI tool calling, HTTPS REST endpoints, and bearer authentication.</p>
<p>Disclaimer: This plugin is not affiliated with, endorsed by, or sponsored by Tawk.to. All third-party trademarks belong to their owners.</p>
<p>No external AI API calls, remote services, external trackers, account code, cart links, autoship actions, or write actions are included in the Free scope.</p>
<h3>Free Features</h3>
<ul>
<li>Bearer-token REST security with hashed token storage.</li>
<li>Public health and OpenAPI schema endpoints.</li>
<li>Optional token requirement for product tools.</li>
<li>WooCommerce product search with short-lived transient caching.</li>
<li>Product availability by SKU or product ID.</li>
<li>Verified order status requiring order number plus billing email or ZIP.</li>
<li>Customer-safe status mapping for built-in and custom WooCommerce statuses.</li>
<li>Customer-safe tracking summaries from supported local tracking metadata.</li>
<li>Admin-controlled privacy-safe logs with enable/disable, clear logs, and retention cleanup.</li>
<li>Tawk.to Ready setup prompt, knowledge block, test questions, and checklist.</li>
<li>Generic OpenAPI-compatible setup guidance for compatible AI assistants.</li>
<li>Optional Tawk widget embed using property ID and widget ID fields.</li>
<li>Config export/import for non-secret plugin settings.</li>
<li>AI behavior mode and industry preset scaffolding for prompt/knowledge generation.</li>
</ul>
<h3>Free Scope Boundaries</h3>
<p>The Free plugin does not create carts, create reorder links, capture leads, process payments, modify orders, process refunds, send emails, send webhooks, or connect to external CRM, automation, shipping, or AI services.</p>
<p>Developer extension points are present for compatible custom implementations, but those integrations are not included in the Free plugin.</p>
<h3>Optional Pro Add-On</h3>
<p>The Free plugin is fully usable on its own for safe product support, product availability, verified order status, tracking summaries, OpenAPI setup, and assistant-ready support configuration.</p>
<p>For stores that want to turn support conversations into customer-click actions, WebExpertDev AI Customer Support Assistant Pro is an optional paid add-on hosted outside WordPress.org. Learn more about the optional Pro add-on on the <a href="https://webexpertdev.us/" rel="nofollow ugc">WebExpertDev website</a>.</p>
<p>Pro adds separate paid workflows through separate Pro code:</p>
<ul>
<li>Lead Capture</li>
<li>Secure Cart Links</li>
<li>Secure Reorder Links</li>
<li>Product Discovery</li>
<li>AI Search Keywords</li>
<li>Knowledge Builder</li>
<li>Advanced Tracking support</li>
</ul>
<p>Pro secure links are signed, expiring, customer-click review links. They do not create orders, process payments, issue refunds, or secretly change carts.</p>
<p>Free remains fully usable without Pro and does not include Freemius, payment, telemetry, account code, or Pro source.</p>
<h3>Third-Party Services</h3>
<p>This plugin does not call third-party APIs by itself and does not include a hosted AI service.</p>
<p>If a site administrator enables the optional Tawk widget embed, visitor browsers may load the widget script from <code>https://embed.tawk.to/</code> using the property ID and widget ID entered by the administrator. That widget service is provided by Tawk.to. Review Tawk.to’s privacy policy and terms before enabling the widget:</p>
<ul>
<li>Privacy policy: <code>https://www.tawk.to/privacy-policy/</code></li>
<li>Terms of service: <code>https://www.tawk.to/terms-of-service/</code></li>
</ul>
<p>If a site administrator manually imports this plugin’s OpenAPI schema into Tawk.to AI Assist or another compatible OpenAPI-based AI platform, that platform may call this site’s REST endpoints using the bearer token the administrator provides. The plugin does not create a Tawk.to account, transmit API tokens to Tawk.to automatically, transmit tokens to any AI platform automatically, or imply any affiliation with Tawk.to.</p>
<h3>Security Model</h3>
<p>Protected endpoints use <code>Authorization: Bearer TOKEN</code>. Tokens are shown only immediately after generation and stored hashed. Order status is always protected and requires order number plus billing email or ZIP. The plugin does not return payment details, full addresses, internal notes, customer IDs, user IDs, private meta, fraud data, risk data, or backend routing.</p>
<p>The optional Tawk widget embed uses safer ID-based fields for the Tawk property ID and widget ID. The plugin generates the widget URL from those IDs and does not accept arbitrary JavaScript embed code.</p>
<p>Config exports exclude API tokens, token hashes, logs, order data, customer data, and secrets. Imports are sanitized and do not import secrets.</p>
<p>Plugin settings are stored in the <code>wcast_settings</code> option. Privacy-safe logs are stored under <code>wp-content/uploads/webexpertdev-ai-customer-support-assistant/logs/</code>. Product search and generated prompt/knowledge caches use <code>wcast_</code> transients when present.</p>
<p>Uninstall cleanup is controlled from the plugin admin. By default, logs and generated caches are removed on uninstall, while settings are retained unless explicitly enabled for deletion. The plugin never deletes WooCommerce orders, products, customers, or order meta.</p>
<h3>Minimum Requirements</h3>
<ul>
<li>PHP 7.4 or newer.</li>
<li>WordPress 6.2 or newer.</li>
<li>WooCommerce 7.1 or newer for live tools.</li>
</ul>
<p>If WooCommerce is inactive, the admin setup remains available and tools return unavailable responses.</p>
<h3>Platform Scope</h3>
<p>The Free plugin implements WooCommerce REST/OpenAPI tools under <code>/wp-json/wc-ai-support/v1/</code>. It is Tawk.to Ready today and OpenAPI-compatible by design for AI assistants that support OpenAPI tool calling and bearer authentication. Platform behavior varies, and this plugin does not claim official support for every AI platform.</p>


WebExpertDev AI Customer Support Assistant

Safe AI customer support tools for stores using WooCommerce, Tawk.to AI Assist, OpenAPI, and compatible assistants.

Ajay Maurya

<p><strong>AJ Agent Crawl Optimizer</strong> is a thin compatibility layer that teaches your site to speak the languages AI agents already use to discover and consume web content. It publishes machine-readable manifests at well-known URLs, serves clean Markdown when an AI requests it, and declares your AI-usage preferences — all without changing anything for human visitors.</p>
<p>Each capability is a separate toggle under <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> AJ Agent Crawl Optimizer</strong> and ships <strong>opt-in</strong> (everything starts off). On first activation, a one-time <strong>Quick Setup wizard</strong> suggests sensible defaults based on your environment (for example, it skips JSON-LD when an SEO plugin is detected so you don’t get duplicate structured data).</p>
<h4>Discovery — help agents find what your site offers</h4>
<ul>
<li><strong>API Catalog</strong> (RFC 9727) — <code>/.well-known/api-catalog</code> linkset advertising your REST API, plus a <code>Link: rel="api-catalog"</code> header on every response so agents discover it from any URL.</li>
<li><strong>MCP Server Card</strong> (SEP-1649 draft) — <code>/.well-known/mcp/server-card.json</code> describing the site to MCP-aware agents.</li>
<li><strong>Agent Skills Index</strong> (RFC v0.2.0) — <code>/.well-known/agent-skills/index.json</code> listing six skills (search, posts, pages, media, categories, tags) plus per-skill <code>SKILL.md</code> artifacts with verifiable sha256 digests.</li>
<li><strong>llms.txt</strong> (per llmstxt.org) — <code>/llms.txt</code> curated, LLM-readable index of your top pages and recent posts, with a Discovery section auto-linking every other plugin endpoint.</li>
<li><strong>IndexNow</strong> — non-blocking ping to Bing and Yandex on every post publish so search engines re-crawl within minutes.</li>
</ul>
<h4>Presentation — format content for agents</h4>
<ul>
<li><strong>Markdown Negotiation</strong> — when a request includes <code>Accept: text/markdown</code>, the page is served as clean Markdown with <code>X-Markdown-Tokens</code> for context budgeting. Browsers (which send <code>text/html</code>) are completely unaffected.</li>
<li><strong>JSON-LD Schema</strong> — Schema.org structured data: WebSite, Organization, Article, BreadcrumbList, and auto-detected FAQPage. Logo resolved from your theme’s custom logo or site icon.</li>
<li><strong>OpenAPI 3.0.3</strong> — <code>/?format=openapi</code> returns a complete spec generated dynamically from <code>rest_get_server()</code>, including plugin-registered REST routes.</li>
<li><strong>WebMCP Tools</strong> — registers four tools (search, posts, pages, site info) via <code>navigator.modelContext.provideContext()</code> for browsers that support the W3C WebMCP draft.</li>
</ul>
<h4>Declarations</h4>
<ul>
<li><strong>Content-Signals</strong> — appends a <code>Content-Signal: ai-train=no, search=yes, ai-input=no</code> directive to robots.txt declaring your AI-usage preferences (per contentsignals.org). Composes with Yoast/Rank Math/AIOSEO — their additions are preserved, our line lands at the very end.</li>
</ul>
<h4>Why use it</h4>
<ul>
<li><strong>No conflicts with your SEO plugin.</strong> JSON-LD auto-suppresses when Yoast SEO, Rank Math, All in One SEO, SEOPress, The SEO Framework, Slim SEO, Squirrly SEO, Schema Pro, or SASWP is active.</li>
<li><strong>Multisite-aware.</strong> Every endpoint also resolves at <code>/{subsite}/...</code> paths automatically.</li>
<li><strong>Cached.</strong> OpenAPI is cached for a day, llms.txt for an hour, with proper invalidation on plugin activation, theme switch, post changes, and setting toggles.</li>
<li><strong>Performance-conscious.</strong> Markdown handler runs at <code>PHP_INT_MAX</code> priority so it doesn’t break object-cache flushes or Query Monitor. IndexNow pings are non-blocking.</li>
<li><strong>Extensible.</strong> Nine filter hooks let you customize skills, schemas, capabilities, and content. See “For Developers” below.</li>
<li><strong>Accessible.</strong> Score-card SVG has dynamic <code>aria-label</code>, copy buttons announce success via <code>aria-live</code>, decorative arrows hidden from screen readers via CSS pseudo-elements.</li>
</ul>
<h4>For developers</h4>
<p>The plugin exposes nine filter hooks for extension. Examples:</p>
<pre><code>add_filter( 'ajaco_required_capability', function () { return 'edit_posts'; } );
</code></pre>
<p>Delegate plugin access to a non-admin role.</p>
<pre><code>add_filter( 'ajaco_skill_definitions', function ( $skills ) { return $skills + [ 'products' => [ 'type' => 'information-retrieval', 'description' => 'WooCommerce products', 'endpoint' => rest_url( 'wc/v3/products' ) ] ]; } );
</code></pre>
<p>Register custom skills that ship in the Agent Skills Index and are served as SKILL.md artifacts with verifiable sha256 digests.</p>
<pre><code>add_filter( 'ajaco_content_signal', function () { return 'ai-train=yes, search=yes, ai-input=yes'; } );
</code></pre>
<p>Customize the Content-Signal directive (e.g. permit AI training).</p>
<p>Other hooks: <code>ajaco_api_catalog_linkset</code>, <code>ajaco_mcp_server_card</code>, <code>ajaco_json_ld_graph</code>, <code>ajaco_openapi_spec</code>, <code>ajaco_llms_txt_content</code>, <code>ajaco_active_seo_plugin</code>. The settings page’s Help tab <span aria-hidden="true" class="wp-exclude-emoji">→</span> For Developers lists all of them with descriptions.</p>
<h3>External services</h3>
<p>This plugin connects to one external service, and only when the corresponding feature is explicitly enabled by the site administrator.</p>
<h4>IndexNow (api.indexnow.org)</h4>
<p>What it is and what it’s used for: IndexNow is an open protocol (originally from Microsoft Bing and Yandex) that lets sites notify search engines the moment a URL is published or updated, so search engines can re-crawl within minutes instead of days.</p>
<p>When data is sent: only when the <strong>IndexNow</strong> feature toggle is turned on AND an IndexNow API Key is configured on the settings page. In that case, every time a post of a public post type transitions to the <code>publish</code> status, the plugin fires a single non-blocking HTTPS POST to <code>https://api.indexnow.org/indexnow</code>.</p>
<p>What data is sent: the request body is a JSON document containing exactly three fields — your site’s host (e.g. <code>example.com</code>), your IndexNow API key (which you generated yourself at Bing Webmaster Tools), and the permalink URL of the post that was just published. No visitor information, IP addresses, user-agents, or post content is sent.</p>
<p>If the IndexNow feature toggle is off (the default), the plugin makes no outbound network requests of any kind.</p>
<p>This service is provided by Microsoft (Bing) and the IndexNow project. Their terms and privacy policies apply:</p>
<ul>
<li>IndexNow protocol documentation: https://www.indexnow.org/documentation</li>
<li>IndexNow FAQ and terms: https://www.indexnow.org/faq</li>
<li>Microsoft Bing Webmaster Guidelines : https://www.bing.com/webmasters/help/webmaster-guidelines-30fba23a</li>
<li>Microsoft Privacy Statement: https://www.microsoft.com/en-us/privacy/privacystatement</li>
</ul>
<h3>Privacy</h3>
<p>AJ Agent Crawl Optimizer stores data <strong>only on your own server</strong> — there is no telemetry, no analytics, and no third-party logging. Specifically:</p>
<h4>Local data</h4>
<ul>
<li>Plugin <strong>option rows</strong> in the WordPress options table store toggle states and the IndexNow API Key (stored as plain text — keep your database secure).</li>
<li><strong>Transients</strong> cache the OpenAPI document and llms.txt body. These are deleted on plugin uninstall.</li>
<li>No request data, IP addresses, User-Agents, or visitor information is recorded by the plugin.</li>
</ul>
<h4>Outbound network calls</h4>
<p>The plugin makes exactly <strong>one</strong> outbound HTTP request, and only when explicitly enabled:</p>
<ul>
<li><strong>IndexNow</strong> — when the IndexNow toggle is on and a key is configured, the plugin sends a non-blocking POST to <code>https://api.indexnow.org/indexnow</code> on every post publish. The payload contains the site host, the IndexNow key, and the URL of the published post (no visitor data).</li>
</ul>
<p>If the IndexNow toggle is off (the default), the plugin makes zero outbound network requests. All other features (manifests, JSON-LD, robots.txt) only respond to incoming HTTP requests; they never call out.</p>
<h4>Cookies</h4>
<p>The plugin does not set any cookies.</p>
<h4>Uninstall</h4>
<p>When the plugin is <strong>deleted</strong> (not just deactivated), all plugin options, the IndexNow key, and all transients are removed from the database. Multisite networks have every site cleaned in turn.</p>


AJ Agent Crawl Optimizer


Helpful plugin to bridge the gap between standard WordPress SEO website and AI Crawler tools. Good Job Ajay!


Quick and Easy way of making your website AI crawler reach

Make your WordPress site legible to AI agents — Markdown negotiation, JSON-LD, OpenAPI, MCP server card, llms.txt, IndexNow, and more.

WebExpertDev AI Customer Support Assistant vs AJ Agent Crawl Optimizer