Let AI Agents Work in Your Store — Without Letting Them Break It

When an agent tries to delete a product or move an order to Completed, Cancelled or Refunded, nothing happens until a store manager clicks Approve or Reject. Even a confused or manipulated agent cannot do damage on its own.

Every call to a WooCommerce ability — reads and changes — is recorded: which ability, which product or order, which user, and what happened. IDs only, never customer names, emails or addresses.

The Tillkeeper page lists every store ability available to agents, which ones change data, and which ones are protected.

Require approval for every order status change, only for final statuses, or not at all, and turn product deletion protection on or off.

Tillkeeper guards WooCommerce's own standard abilities, so ChatGPT, Claude, your own bots or any MCP client that calls them is covered without learning anything new.

Adds tillkeeper/list-customers and tillkeeper/get-customer, which WooCommerce does not have yet — available only to users who can list site users.

Coming soon. The agent first gets back exactly what would change plus a one-time confirmation token; the change runs only when it repeats the same call with that token within 15 minutes.

Coming soon. Price, sale price, stock and status edits made through WooCommerce's product-update ability join the guarded actions.

Coming soon. A maximum discount and stock change per call — anything over a limit goes to the approval queue — plus a cap on how many changes agents can make per hour.

Coming soon. A before/after record of every guarded change and one-click rollback for price and stock. Order status changes and deletions are never offered for rollback: emails and other side effects cannot be undone.