| 开发者 | ecentic |
|---|---|
| 更新时间 | 2026年7月14日 05:21 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
/.well-known/ucp — the UCP discovery profile (cached proxy of your hosted profile, so agents always discover you at your own URL)/.well-known/oauth-authorization-server — OAuth 2.0 metadata (RFC 8414) for UCP identity linking/ucp-oauth/authorize|token|revoke — the identity-linking authorization server: your customers log in and grant consent on your site, never on a third party/ucp-connect/* — the one-click écentic connection (OAuth 2.0 + PKCE; the API secret never travels through a browser)X-UCP-Key)order.created, order.updated) with Standard Webhooks headers and RFC 9421 signatures, relayed through écenticecentic_ucp_process_instrument (custom payment processors), ecentic_ucp_payment_handlers, ecentic_ucp_identity_scopes, ecentic_ucp_stripe_secret_keyhttps://yourstore.com/.well-known/ucp to see your live discovery profile, and fine-tune the settings on the same screen.No. Installing and activating the plugin transmits nothing. The store contacts écentic for the first time only when a store administrator clicks Connect to ecentic.ai on the settings screen, and it stops the moment you revoke the API key.
No. The plugin adds .well-known URLs, the identity-linking endpoints, and a private REST bridge. Your storefront, theme, and checkout are untouched, and agent orders are created through the same WooCommerce internals as regular orders (created_via = ucp, so you can tell them apart).
Your product catalog, store policy needed to serve the protocol (currency, shipping options, legal page links, payment handler declarations, your UCP settings), and the orders created through agent checkouts. The connection uses a WooCommerce REST API key you approve explicitly and can revoke at any time. Payment secrets (e.g. your Stripe secret key) and customer passwords never leave your site.
Only if you turn on server-side Stripe processing and have the WooCommerce Stripe Gateway configured. Otherwise agent checkouts create the order unpaid and the buyer pays on your own order-pay page — you remain the Merchant of Record either way.
An optional OAuth 2.0 flow (built into this plugin) that lets a customer link their account on your store to their AI assistant, so the agent can access user-gated operations such as order history. Consent happens on your domain; you control which scopes are gated via the ecentic_ucp_identity_scopes filter.
In WooCommerce → UCP (AI Agents): set an API key, list allowed agent platforms, require signed requests, or set a rate limit. Leave everything open for permissionless onboarding.
Visit https://yourstore.com/.well-known/ucp — it returns your UCP profile with the hosted endpoint agents will call. The settings page links both.
UCP 2026-04-08.