Title: Tactical — AI Agent Detection for WooCommerce
Author: sourabhnk
Published: Èbìbí 21, 2026
Last modified: Agẹmọ 6, 2026
---
Ṣàwárí àwọn plugin
# Tactical — AI Agent Detection for WooCommerce
Láti ọwọ́ [sourabhnk](https://profiles.wordpress.org/sourabhnk/)
[Ṣe ìgbàsílẹ̀](https://downloads.wordpress.org/plugin/tactical-agent-detection.1.1.0.zip)
* [Àwọn àlàyé](https://yor.wordpress.org/plugins/tactical-agent-detection/#description)
* [Àwọn àgbéyẹ̀wò](https://yor.wordpress.org/plugins/tactical-agent-detection/#reviews)
* [Ìgbéwọlẹ̀](https://yor.wordpress.org/plugins/tactical-agent-detection/#installation)
* [Ìdàgbàsókè](https://yor.wordpress.org/plugins/tactical-agent-detection/#developers)
[Ìrànlọ́wọ́](https://wordpress.org/support/plugin/tactical-agent-detection/)
## Àpèjúwe
Most AI retrieval crawlers — the bots that feed ChatGPT, Perplexity, Claude, and
GoogleÌtumọ̀ Yorùbá: ’s AI answers — **do not run JavaScript**, so JavaScript-only
analytics (including standard site analytics) never see them. This plugin adds **
server-side detection**: when a known AI crawler requests a page, Tactical records
it — no JavaScript required. Human visitors are untouched (an event fires only on
a matched AI user-agent), so thereÌtumọ̀ Yorùbá: ’s zero measurable impact on page
speed.
AI shopping agents and crawlers from ChatGPT, Perplexity, Claude, and Google AI
visit your storefront every day — fetching products, comparing prices, deciding
what to recommend. This plugin makes that traffic visible: which AI fetched which
product pages, what shopping agents did on-site, and which humans arrived from AI
answers.
This plugin connects your WooCommerce store to **Tactical**, a third-party agent-
traffic intelligence service operated at https://tactical-app.work. The plugin handles
install, snippet injection, and WooCommerce webhook registration; the dashboard,
alerts, and reporting live in your Tactical account on tactical-app.work.
**What you get:**
* **Agent Traffic Monitor** — real-time counts of agent visits broken down by agent
type, day, and product
* **Intent Signals** — score every session by browse vs. buy intent; compare agent
vs. human conversion
* **Competitive Exposure** _(paid plans)_ — see which competitors are sending agents
to check your prices
**Why agent traffic matters now:**
Standard analytics filter agent traffic out as “bot noise”. As of Q2 2026, AI agents
make up an estimated 8–12% of e-commerce site visits — and that share is growing
month over month. The merchants who see this traffic are the ones positioned to
capture the buyers it represents.
**Tactical pricing — managed at tactical-app.work:**
Tactical is a tiered SaaS product. The plugin works on every tier, including the
free one.
* **Scout — $0/mo (free forever)** — TacticalÌtumọ̀ Yorùbá: ’s free tier. 100 agent
sessions/week, top 3 agent types, weekly intelligence brief. No credit card.
* **Radar — $39/mo** — 90-day history, all agent types, intent signals, product
interest map (10,000 sessions/mo)
* **Command — $129/mo** — competitive exposure, revenue leakage estimates, custom
competitor tracking, unlimited products (50,000 sessions/mo)
Annual plans save ~25%.
**Multi-platform:**
This plugin is for WooCommerce. The same Tactical account also works on Shopify (
via the Shopify App Store) and on any custom storefront (via JS snippet at tactical-
app.work).
### External services
This plugin connects to **Tactical** at https://tactical-app.work — a third-party
agent-traffic intelligence service operated by the plugin author. The plugin requires
an active Tactical account (free Scout tier is sufficient) to function. Without
an API key configured on the settings page, no requests are made.
**Endpoints used:**
* **Snippet ingest** — `https://tactical-app.work/api/ingest`. The detection script(`
https://tactical-app.work/snippet.js`) loads on every storefront page view and
posts an event payload containing: an anonymised session ID, page URL (path +
query string only), referrer domain, user-agent string, scroll/mouse/timing heuristics,
and your storeÌtumọ̀ Yorùbá: ’s API key. No customer PII (no names, emails, IP
addresses, payment data, or form contents) is sent.
* **Connection verification** — `https://tactical-app.work/api/verify-connection`.
Triggered only when an admin clicks “Verify connection” on the settings page.
Sends only your API key (in a request header) so Tactical can confirm the key
belongs to this store. No event data.
* **WooCommerce webhooks** — `https://tactical-app.work/api/wc-webhook/`.
On plugin activation, three webhook subscriptions are registered with WooCommerce(`
order.created`, `order.updated`, `product.created`, `product.updated`). WooCommerce
delivers these payloads directly to Tactical with WCÌtumọ̀ Yorùbá: ’s standard
HMAC signature when matching events occur on your store. Payload contents are
WooCommerceÌtumọ̀ Yorùbá: ’s standard webhook bodies (order or product objects).
**Conditions:** events are only sent after you paste a valid API key on the settings
page. Without a key, the snippet does not load, no requests are made, and no webhooks
are registered.
**Service terms:**
* Tactical Privacy Policy: https://tactical-app.work/privacy
* Tactical Terms of Service: https://tactical-app.work/terms
## Ìgbéwọlẹ̀
1. Upload the `tactical-agent-detection` folder to `/wp-content/plugins/`, or install
via the Plugins Add New screen.
2. Activate the plugin. (WooCommerce must be installed and active first; this plugin
declares it as a required dependency.)
3. Sign up at https://tactical-app.work and copy your API key from the dashboard.
4. Go to Settings Tactical and paste the API key.
5. Click “Verify connection” — you should see a green checkmark.
6. Open your storefront — Tactical starts classifying agent traffic immediately.
The plugin auto-registers WooCommerce webhooks for `order.created`, `order.updated`,`
product.created`, and `product.updated` so order and catalog activity is correlated
with agent sessions.
## FAQ
### Do I need a Tactical account to use this plugin?
Yes — sign up free at tactical-app.work. The free Scout tier is 100 agent sessions
per week with no credit card.
### What data does the plugin collect?
Anonymised session metadata only: user-agent, page URL, referrer, scroll/mouse heuristics,
and product context. No PII, no IP addresses, no cart contents, no customer identifiers.
### How is agent traffic detected?
TacticalÌtumọ̀ Yorùbá: ’s edge classifier uses user-agent patterns, IP-derived signals(
datacenter flag, country — the IP itself is not stored), request behaviour, and
known agent fingerprints to identify ChatGPT, Perplexity, Claude, Google AI, and
other AI agents in real time.
### Will this slow down my site?
No. The storefront script loads asynchronously with the `defer` attribute and weighs
under 5 KB, and classification happens at TacticalÌtumọ̀ Yorùbá: ’s edge, off your
origin. Server-side crawler detection does nothing for human visitors — it only
fires a lightweight, non-blocking request when a requestÌtumọ̀ Yorùbá: ’s user-agent
matches a known AI crawler, so real visitors incur no extra HTTP call and no measurable
TTFB change.
### How do I cancel?
Cancel from the Tactical dashboardÌtumọ̀ Yorùbá: ’s billing page at tactical-app.
work. The plugin keeps working on the free Scout tier after cancellation.
### WhereÌtumọ̀ Yorùbá: ’s my data stored?
In TacticalÌtumọ̀ Yorùbá: ’s Postgres database (US/EU regions). Aggregated and purged
on a 90-day rolling window.
### Is this GDPR-compliant?
Tactical processes data under the legitimate-interest legal basis. We donÌtumọ̀
Yorùbá: ’t store PII or browser fingerprints, and merchants can request data deletion
at any time from the dashboard or by emailing hello@tactical-app.work. A Data Processing
Addendum is available on request.
## Àwọn àgbéyẹ̀wò
Kò sí àwọn àgbéyẹ̀wò fún plugin yìí.
## Àwọn Olùkópa & Olùgbéejáde
“Tactical — AI Agent Detection for WooCommerce” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀.
Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.
Àwọn Olùkópa
* [ sourabhnk ](https://profiles.wordpress.org/sourabhnk/)
[Túmọ̀ “Tactical — AI Agent Detection for WooCommerce” sí èdè rẹ.](https://translate.wordpress.org/projects/wp-plugins/tactical-agent-detection)
### Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?
[Ṣàwárí koodu](https://plugins.trac.wordpress.org/browser/tactical-agent-detection/),
ṣàyẹ̀wò [ibi ìpamọ́ SVN](https://plugins.svn.wordpress.org/tactical-agent-detection/),
tàbí ṣe àgbékalẹ̀ sí [àkọsílẹ̀ ìdàgbàsókè](https://plugins.trac.wordpress.org/log/tactical-agent-detection/)
nípasẹ̀ [RSS](https://plugins.trac.wordpress.org/log/tactical-agent-detection/?limit=100&mode=stop_on_copy&format=rss).
## Àkọsílẹ̀ àwọn àyípadà
#### 1.1.0
* **New: server-side AI crawler detection.** Detects AI crawlers that donÌtumọ̀
Yorùbá: ’t run JavaScript (most retrieval crawlers) by matching the request user-
agent against a maintained registry of AI operators (OpenAI, Anthropic, Perplexity,
Google, Meta, Apple, Amazon, ByteDance, Mistral, DuckDuckGo, and more). Fires
only on a matched AI user-agent — zero extra work, and zero measurable impact,
for human visitors.
* Non-blocking delivery (`wp_remote_post` with `blocking => false`, 1s timeout)
and a 60-second per-(agent, URL) dedup guard against crawler bursts.
* New settings toggle “Server-side AI crawler detection” (on by default) with a“
last event sent” status line.
* Optional `tactical_trust_proxy_headers` filter to read the crawlerÌtumọ̀ Yorùbá:’
s real IP from CDN/proxy headers when the store is behind Cloudflare or similar.
#### 1.0.2
* Security: removed the `data-key` attribute from the storefront `