The AI proposes. You approve. Your site executes.

Nothing changes without a human

The AI can only create a draft. Your site shows a preview of every change, before and after. Approve, reject and undo exist only as buttons for a logged-in administrator — never as something the AI can call. Only the person who started a change can approve it.

Every change can be undone

Your site keeps the before and after of each change. Undo checks for conflicts first, so it never overwrites edits made by someone else in the meantime.

Users and accounts are off-limits — permanently

addsynapse cannot create, edit or delete users or customers, and cannot change passwords, roles or emails. Taking over an admin account is the most common goal of attacks; a capability that does not exist cannot be abused.

No SQL, no code

The AI only returns “operation + parameters”. Your site validates them against a strict schema and applies them through WooCommerce’s own functions. The worst possible outcome is a wrong suggestion — which you see before approving.

Your customers’ data stays in your shop

Orders are summarised without names, emails, phones or addresses. Sensitive fields (secrets, tokens, files) are redacted and can never be written. The AI’s internal reasoning never reaches your browser.

Data is data, not instructions

Product names, descriptions and uploaded files are treated as untrusted data. Our instructions to the AI are fixed and never mixed with your shop’s content, which blocks “ignore previous instructions” tricks.

Signed, domain-bound requests

Every request between the plugin and addsynapse is signed (HMAC-SHA256) with a timestamp and a single-use nonce, and must come from the domain registered for your site. Stolen keys on another domain do not work.

Plans and limits enforced server-side

What each plan can do is decided on our servers, not in the plugin. Daily usage caps, rate limits and size limits protect you from runaway costs and abuse.

Secrets are protected

Your site secret is encrypted in WordPress and never displayed again after setup. The AI provider key lives only on our servers and never reaches your site.

Your account

Two-factor authentication (required for owners and billing), sign-in with Google or GitHub only with verified emails, separate staff area with its own login, and an audit log of sensitive actions.