About this plugin
Cognitcxt AI Chat Assistant for WooCommerce adds an AI customer support assistant to your store. ” — instantly and around the clock, using live data from your WooCommerce store instead of canned replies.
What your customers can ask:
- Order tracking and order history
- Refund and return requests, and order cancellations
- Product questions and catalog search
- Shipping, payment and store-policy questions
- Account questions, complaints and feedback
Why store owners use it:
- Fewer support tickets — routine order and refund questions are resolved without a human.
- Always accurate — every answer is built from your live orders, products and policies.
- Live in minutes — install the plugin, paste your license key, and the widget appears on your store.
- More than web chat — from your Cognitcxt dashboard the same assistant can also answer customers on WhatsApp, voice calls and email.
Try it first in the live demo store. Plans start at $20 per store per month — see pricing.
Plugin features:
- Floating chat bubble that auto-injects into your site footer — no shortcode required
- Shortcode [cognitcxt_chat] for manual placement with position, width, and height options
- License key authentication — only activated sites can use the widget
- Supports multiple license keys per site (e.g. multi-store setups)
- Display control — show the widget on all pages or select specific pages/posts
- Demo mode — let unauthenticated visitors preview the chat on a marketing page
- Works with WooCommerce 5.x and above for product and order look-ups
- Integrates with the MCP (Model Context Protocol) standard for AI tool use
- Compatible with WooCommerce 9.x shared MCP adapter — no conflicts
Requirements:
- WordPress 5.8 or later
- PHP 7.4 or later
- WooCommerce (for product and order features)
- HTTPS / SSL enabled on your site
- A valid Cognitcxt license key (available at cognitcxt.com )
- Visitors must be logged in to use the chat widget (the widget identifies users by their WordPress user ID to look up orders and account data)
External Services
com to validate and activate license keys. This connection is initiated only by a site administrator from the plugin settings page — it is never triggered automatically in the background without admin action.
What data is sent and when:
-
com)
Triggered when an admin clicks Activate License or Add & Validate in the plugin settings.
Data sent:
- License key entered by the admin
- Site URL ( home_url() )
- A randomly generated API secret (auto-created on plugin activation, stored in wp_options )
- WordPress username and a WordPress Application Password (used by the Cognitcxt backend to authenticate REST API requests from the AI to your site)
- Platform identifier ( WOOCOMMERCE )
-
com)
Triggered when an admin switches the active license in the Activated Licenses tab.
Data sent:
- License key
- Site URL
No data is sent to external servers on the front end or during normal page loads. com/widget/ ). The iframe receives the license key, a WordPress user ID, and the site URL as URL parameters so the chat UI can authenticate requests.
Cognitcxt service links:
- Service home: https://cognitcxt.com
- Privacy Policy: https://cognitcxt.com/privacy
- Terms of Service: https://cognitcxt.com/terms
Security and Vulnerability Disclosure
com with a description of the issue, steps to reproduce, and any relevant proof-of-concept. We aim to acknowledge reports within 48 hours and to release a patch within 14 days for critical vulnerabilities.
Please do not disclose vulnerabilities publicly until we have had a reasonable opportunity to investigate and remediate. We do not currently operate a bug bounty programme, but we are committed to crediting reporters in release notes where disclosure is consented to.
This policy is maintained in compliance with the EU Cyber Resilience Act, which requires commercial WordPress plugin developers distributing software to EU users to have a formal vulnerability disclosure process in place by September 2026.