Pro Features
Themesic Browser Agent Tools, the free plugin on WordPress.org, covers read and discovery - everything an agent needs to understand your catalog and content. Pro is a separate package, which replaces it once installed, adding the tools that let an agent act, a third delivery surface for server-side agents, governance controls, and a layer of integrations with the plugins your site already runs.
The split follows the security boundary: the free plugin is read and public; Pro is write, private and custom. Nothing in the free plugin is switched off awaiting a licence - the paid code is simply not in it.
Commerceโ
Cart toolsโ
Let an agent build and manage the visitor's native WooCommerce cart:
woocommerce.get_cart- view the cart and totalswoocommerce.add_to_cart- add a product, quantity, or variationwoocommerce.update_cart_item- change a line's quantitywoocommerce.remove_cart_item- remove a line
These use WooCommerce's own session cart, so the agent's changes are exactly what the shopper sees. They sit at the Session tier, so they work for guests as well as signed-in customers.
Checkout toolsโ
woocommerce.get_checkout_fields- the fields checkout expectswoocommerce.apply_coupon/woocommerce.remove_coupon- manage coupons
Payment always stays inside WooCommerce's secure checkout. Themesic Agent Tools never handles card data. Coupon attempts carry a deliberately tight rate limit, because a success/failure pair is otherwise an oracle for guessing codes.
Order toolsโ
Give a logged-in customer's assistant access to that customer's own orders:
woocommerce.list_my_orderswoocommerce.get_my_order
Orders are strictly ownership-scoped - no customer can read another's - and HPOS (High-Performance Order Storage) is fully supported.
Guest order trackingโ
woocommerce.track_order lets a shopper who checked out without an account look up their order with the order number plus the matching billing email. It works on guest orders only: a registered customer's order still requires their login.
Recommendations and stockโ
woocommerce.get_related_products- related or cross-sell products for a given itemwoocommerce.notify_me- a signed-in customer asks to be emailed when an out-of-stock product returns. The address comes from their account, never from the request, so nobody can be subscribed by someone else. Mail is sent from a scheduled event in batches, so a restock never stalls the request that caused it.
Answer accuratelyโ
Store policiesโ
store.get_policies returns the shipping, returns, FAQ and about text you write in Settings. It gives an agent a grounded source for the questions customers actually ask, instead of leaving it to guess from page content.
Per-tool agent descriptionsโ
Override the agent-facing description of any tool from the Tools screen. This is how you steer exactly when and how an agent reaches for a given tool, in your own words, without touching code.
Custom contentโ
For each custom post type you allowlist in Settings, Themesic Agent Tools generates read tools (list and get) under the cpt.* namespace, using the type's labels and public fields. Nothing is exposed until you opt a type in, so a CPT holding private data stays private by default.
MCP server endpointโ
Pro exposes a JSON-RPC 2.0 MCP endpoint at /wp-json/themesic-agent/v1/mcp, implementing initialize, tools/list, tools/call and ping on protocol version 2024-11-05.
This is the surface server-side agents connect to - ChatGPT, Claude desktop, and agent frameworks - using the same registry, the same gate and the same rate limits as the browser and REST surfaces. It also fires the same extension points, so your hardening and your webhooks observe server-side agents exactly as they observe browser traffic.
Governanceโ
Per-agent API keysโ
Issue a labelled key per agent and send it as X-Themesic-Agent-Key. Keys are stored hashed, need at least 32 characters, and can never reach a capability-gated tool. See Security.
Confirmation for sensitive actionsโ
Flag any tool so it refuses to run until the caller returns a single-use token bound to that exact call. See Security for what this does and does not guarantee.
Webhooksโ
POST a small metadata-only notification to your own URLs after every tool call: tool name, success, status, time, site URL. Never parameters, never results.
IP allowlistโ
Restrict the API to a list of addresses. Read the limitation behind a reverse proxy before relying on it.
Works with your favourite pluginsโ
Themesic Agent Tools includes an ecosystem-integration layer. Each integration appears automatically only when its plugin is active, and every one respects the same rules: public or ownership-scoped data only, never emails or private fields.
| Integration | Tools | Supported plugins |
|---|---|---|
| Custom fields | content.get_custom_fields | Advanced Custom Fields (ACF) |
| Community | buddypress.search_members, buddypress.list_groups | BuddyPress, BuddyBoss |
| Forms | forms.list_forms, forms.submit_form | Gravity Forms (submit), Contact Form 7, WPForms |
| Memberships | memberships.list_plans, memberships.my_status | Paid Memberships Pro, Restrict Content Pro, MemberPress |
| LMS | lms.list_courses, lms.my_courses | LearnDash, LifterLMS, Tutor LMS |
| Bookings | bookings.list_services | WooCommerce Bookings, Amelia, Bookly |
| Subscriptions | subscriptions.list_mine | WooCommerce Subscriptions |
store.list_integrations reports which are active, and a documented PHP API lets you add your own.
ACF fields and submittable forms expose nothing until you name what may be shared. ACF fields routinely hold cost price, supplier or internal notes the theme never renders; and a programmatic form submit skips honeypot and JavaScript anti-spam while still firing the form's notifications. Both are opt-in by design - see the Admin guide.
WordPress Abilities API bridgeโ
On WordPress 6.9+, Themesic Agent Tools can bridge the server-side Abilities API into its tool registry, adding the browser WebMCP layer that the Abilities API does not provide on its own. This is off by default and enabled with a single filter:
add_filter( 'themesic_agent_abilities_enabled', '__return_true' );
Where to get itโ
One codebase, three packages:
| Package | Where | Licensing |
|---|---|---|
| Themesic Browser Agent Tools for WooCommerce | WordPress.org | Free |
| Pro | themesic.com | Annual, per-site licence |
| CodeCanyon | CodeCanyon | One-time purchase |
The plugin on WordPress.org contains the free code and nothing else. The paid tools are not in it, switched off or otherwise: the files are simply absent, and the free plugin reaches those features through hooks that nothing answers until the paid package is installed.
Buying Pro gives you a separate package that carries both the free and the paid code and replaces the free plugin on your site. CodeCanyon is the same paid code, licensed by Envato instead. The engine, the security gate and the REST, OpenAPI and in-page surfaces behave identically in all three.
See the Support page for purchase and licensing links, or buy directly from the Themesic store to pay less than on CodeCanyon.