WooCommerce has started to speak MCP, the open standard that lets AI apps such as Claude and ChatGPT use tools on a website. If you run a store, that raises practical questions: what can an AI app do with it, how do you switch it on, and is it safe with real orders and customers? This article answers them in plain words, including a change that arrives with WooCommerce 11.3.
The short answer
- WooCommerce describes its own store actions as abilities. They cover finding, creating, updating and deleting products, and finding orders, adding order notes and changing an order’s status.
- AI apps reach those abilities through the WordPress MCP Adapter, the official plugin that offers abilities to AI apps. From WooCommerce 11.3, that is the route WooCommerce documents.
- It is a developer preview. WooCommerce says the details may change between releases.
- PowerWP AI is a separate route: a complete MCP server for WordPress and WooCommerce, with its own store tools, masked customer data and bulk edits that roll back in one step.
What WooCommerce offers
Since WordPress 6.9, plugins can describe what they can do through the Abilities API. Each ability has a name, the input it accepts, the result it returns and a permission check. WooCommerce uses this for its store actions. On a store running WooCommerce 11.2, you find abilities to:
- find products with filters, and create, update or delete a product;
- find orders with filters, add a note to an order and change an order’s status.
WooCommerce’s developer documentation also lists an ability to read order notes. Each ability checks the rights of the WordPress user the AI app acts as, so the app can never do more than that user.
New to MCP or abilities? What is WordPress MCP? and the MCP Adapter explained cover the basics.
How an AI app connects to it
WooCommerce’s developer documentation describes this setup for WooCommerce 11.3 and newer:
- Install and activate the MCP Adapter plugin from WordPress.org.
- Create a WordPress user for the AI app with only the rights it needs, and an application password for that user.
- Point the AI app at your store’s MCP address,
your-store.com/wp-json/mcp/mcp-adapter-default-server. Desktop apps usually reach it through a small Node.js helper on your computer. For a store on your own computer, WP-CLI starts the server directly. - Ask the app to look for the store’s abilities. It sees three general tools: find abilities, read one ability’s details and run one.
Use HTTPS, and set your permalinks to anything other than Plain, or the address won’t work.
If you are on WooCommerce 11.2
WooCommerce 11.2 also has an experimental feature called WooCommerce MCP, switched off by default under WooCommerce › Settings › Advanced › Features. It gives the store an MCP address of its own that works with WooCommerce REST API keys. WooCommerce’s documentation says that address goes away in 11.3 and then answers with a message pointing to the MCP Adapter. If you switched the feature on, plan the move before you update.
What WooCommerce asks you to watch
WooCommerce’s own documentation is direct about the risks, and its advice holds for any AI connection to a store:
- Orders hold personal data. Names, e-mail addresses, postal addresses and payment details can reach the AI app, and from there your AI provider. You stay responsible for data protection.
- Use a separate user with few rights. Don’t connect the app as your own administrator, and revoke application passwords you no longer use.
- Keep passwords out of shared files. An app’s settings file with an application password in it does not belong in a shared folder or a code repository.
- Expect changes. As a developer preview, abilities and setup steps can change between WooCommerce releases.
One more point from running stores: changing an order’s status can send the customer an e-mail, and a sent e-mail can’t be called back. Ask your AI app to show you what it will change before it does.
Where PowerWP AI fits
PowerWP AI takes a different route to the same goal. It is a WordPress plugin that makes your site a complete MCP server, with its own tools for WordPress and WooCommerce. It needs neither the WooCommerce MCP feature nor the adapter, on WooCommerce 11.2 or 11.3. For a store, it adds:
- Store checks that change nothing. Orders by status, failed and stuck orders, stock problems, payment gateways and failed background jobs, on every plan, Free included.
- Customer data masked by default. Order checks leave out names, addresses and IP addresses and mask e-mails, unless you ask for the full address on purpose.
- Bulk edits that roll back in one step. Price, stock and product changes sent as one WooCommerce batch of up to 100 items are recorded together, so one rollback brings them all back.
- Permissions per app. The Content manager preset edits products, prices, stock, coupons and orders. Payment, tax and shipping settings need a separate permission.
- Sign-in for Claude and ChatGPT. No application password and no settings file: you sign in to your store and click Allow.
PowerWP AI can also run WooCommerce’s own abilities with its ability_run tool. Those runs go into the activity log, but PowerWP AI can’t roll back what another plugin’s ability changed, so its own store tools are the safer choice for changes.
Example, on a demo kitchenware store. You ask: “Put the Kitchen category on 15% off from Friday to Monday, and show me the prices first.” Your AI app lists the products with their new sale prices and leaves out two that already have a lower price. After your OK it saves them as one batch, and the activity log shows one entry you can roll back in one step.
Which route should you take?
- WooCommerce’s abilities with the MCP Adapter if you are a developer building on WooCommerce, want to add abilities of your own, and are comfortable with application passwords and app settings files.
- PowerWP AI if you run the store and want your AI app to help with orders, stock and prices now, with customer data masked and changes you can roll back.
The Free plan lets one AI app read one store, with no end date and no changes: a safe way to see what your app finds. The online stores page shows more of what it can do.
Questions
Is WooCommerce MCP switched on by default?
In WooCommerce 11.2 it is an experimental feature that is off by default. From 11.3, WooCommerce’s documentation says its abilities are always registered, but an AI app reaches them only after you install the MCP Adapter and give the app a user and an application password.
Does it cost anything?
No. WooCommerce and the MCP Adapter are free. You bring your own AI app and its plan.
Can the AI app see my customers’ details?
Through WooCommerce’s abilities, it sees what the order data holds for that user, personal data included. With PowerWP AI, order checks mask personal data by default.
Do I need WooCommerce MCP to use PowerWP AI?
No. PowerWP AI is its own MCP server and works with or without it.