Agentic Daisy AI Agent Firewall for WooCommerce

AI agents now run store work: support bots issue refunds, automations reprice products, MCP servers create coupons. Agentic Daisy AI Agent Firewall intercepts their writes, asks your rules, and holds the risky ones for a person. This add-on teaches it what those writes mean for a WooCommerce store.

Rules on what an action is worth

• “Refunds over $50 need my approval.”
• “Price cuts deeper than 20% need approval.”
• “Percent coupons over 30%, and coupons with no usage limit, need approval.”
• “No agent may create webhooks or change payment gateways.”
• “An agent may refund at most $300 a day” – a budget that catches a large refund split into small ones.

Amounts are computed from the store, never taken from what the agent claims, and an amount nobody can know is treated as large.

A refund guard that stops money before it moves

Every refund an agent makes – through the REST API, admin screens, an order set to “refunded”, or another plugin’s code – is decided before WooCommerce saves it and before the payment gateway is called. A held refund runs on approval exactly as it was requested, after checking that the order has not changed since.

Everything an agent can write

• WooCommerce’s REST API (v1 to v4), its admin API and its abilities, in any letter case, and batch requests item by item.
• Orders, products, coupons and their price and stock values, when an agent writes them through admin screens or another plugin rather than the REST API.
• WooCommerce REST API keys: bind a key to an agent, and its requests are that agent’s – on WooCommerce’s own MCP endpoint too (WooCommerce 10.9 to 11.2).
• In-site MCP plugins: Cowboy MCP (1.7.4 up to 1.8), Royal MCP (1.5.10 up to 1.6) and AI Engine (3.8.6 up to 3.9). Their agents are identified, their store tools decided as store writes, and any other tool held for approval. Outside those versions the adapter stays off and says so.

Honest undo

Price changes, coupon changes, trashed items and store settings can be undone from the firewall’s ledger. Stock is adjusted by what the agent changed it by, so sales made since are kept. Gateway refunds, permanent deletes and emails to customers are marked irreversible before you approve them; order status changes are listed with the emails and stock moves they set off.

Works with your store

• HPOS (custom order tables) and posts storage alike.
• Cart and Checkout blocks.
• Multisite.
• Orders in another currency are measured at the order’s stored exchange rate (WooPayments multi-currency, or a filter for other plugins). An order with no stored rate is held for approval rather than measured.

It requires WooCommerce and Agentic Daisy AI Agent Firewall 2.1.0 or later. Everything here works with the free Agent Firewall.