HitlGate Order Review for WooCommerce

HitlGate Order Review for WooCommerce helps store operators pause and review risky WooCommerce orders before fulfillment or money-moving actions.

ai), WordPress, WooCommerce, or Automattic.

Core HITL (works without any required external SaaS)

• Intake thresholds enqueue orders (minimum amount, AOV spike, optional gateway risk meta, force meta).

• Masked evidence packs for reviewers (PII redacted where applicable).

• Admin queue under WooCommerce → HitlGate Order Review.

• Money-moving actions (cancel, partial refund) use a single-use confirm token and the agentops_confirm_money capability.

• Intake is fail-open: exceptions are logged and never block checkout.

Optional integrations

• WooCommerce MCP / WordPress Abilities — expose review tools to Cursor/Claude when Woo MCP is enabled.

• Natural-language settings — optional; uses the WordPress AI Client / Connectors (no direct third-party API keys in this plugin).

• Readiness connector — optional inbound HMAC webhook to store a catalog readiness summary.

• WooCommerce Subscriptions — soft dependency for failed renewal / on-hold enqueue and confirm-gated pause/cancel.

External services

This plugin can optionally connect to third-party services. Core order review does not require any external service.

WordPress AI Client / Connectors (optional)

Used only if you use natural-language settings proposals.

• What it is used for: Turning a plain-language settings request into a proposed settings diff for you to preview and confirm.

• What data is sent: The settings schema description and your natural-language prompt are sent through the WordPress AI Client to whichever AI provider you configured under Settings → Connectors. Order customer PII is not sent by this feature.

• When: Only when an administrator submits a natural-language settings proposal.

• Default: No AI provider is called until you configure a connector (for example OpenAI, Anthropic, or Google provider plugins) under Settings → Connectors. This plugin does not store third-party AI API keys or call provider endpoints directly.

• Follow the terms and privacy policy of the AI provider you connect via Connectors.

Optional readiness summary webhook (optional)

If you configure a webhook secret, an external readiness scanner you control may POST a catalog readiness summary into your site.

• What it is used for: Showing a readiness score in evidence packs and optionally influencing intake when you lower the critical-SKU threshold.

• What data is sent: Your site does not initiate outbound catalog scans from this plugin. The external service (if you use one) may read public/product data according to that service’s own setup; this plugin only accepts an inbound signed summary.

• When: When the configured service posts to /wp-json/agentops/v1/readiness-summary.

• Document the terms and privacy policy of whichever readiness service you connect. This plugin does not require a specific vendor.