"Where is my order?"
Answered, without you.
It is the question your shop gets more than any other, it has a factual answer sitting in your database, and you are still typing it out by hand. AISupportForge reads the actual order and replies, for the signed-in customer who asked and nobody else.
A real answer, from a real shop
This is not a mockup. It is the reply the agent produced on a live WooCommerce install during testing, from the order records as they actually stood.
Order 21 (your most recent order from August 14)
Status: Processing
Item: 1 × Ridgeline Decaf 250g
Total: $9.50
Tracking: 1Z999AA10123456784
Order 20 (from August 7)
Status: Completed
Items: 2 × Ridgeline Dark Roast 1kg
Total: $48.00
Nobody reads anyone else's orders
This is the part worth being fussy about, because a chatbot that can be talked into revealing an order is worse than no chatbot. Three things make that impossible rather than merely discouraged.
The customer id never comes from the conversation
It comes from a token your own WordPress site signs for the logged-in user. The AI model cannot supply it, and neither can the visitor, so there is nothing to talk it into. A model that could pass a customer id is a model that can be persuaded to pass a different one.
The request signature covers the customer id
Every lookup is signed with an HMAC over the customer id and a timestamp. A signature issued for one shopper is mathematically useless for fetching another's orders, and anything older than five minutes is refused, so a captured request cannot be replayed.
Only what is needed leaves your shop
Order number, status, date, total, items and tracking. No addresses, no email addresses, no payment details. The route does not even register itself in WordPress unless you have set a signing secret, so a shop that has not opted in has no endpoint to attack.
Three steps, no template editing
Install the plugin
From the WordPress plugin directory, the ordinary way. It detects WooCommerce on its own.
Paste your site key
One field in the settings screen. The agent reads your pages and starts answering.
Paste a signing secret
One more field, and order lookup switches on. Install WooCommerce later and you just press Save again.
There is no shortcode to place, no JavaScript snippet to paste, and nothing to edit in your theme. If you have ever installed a plugin, you have already done the hard part.
It is not only for shops
Order lookup is an extra, not the product. AISupportForge answers from your pages and your uploaded documents on any WordPress site, shop or not: shipping policies, returns, opening hours, how your service works, whatever your visitors actually ask. If WooCommerce is there, it uses it. If it is not, nothing about the agent changes.
It reads your site
Point it at your address and it crawls your pages, so answers come from your own words rather than a general-purpose model's guesses.
It sees what went wrong
The agent can see what the visitor was doing before they asked, including form errors, so it can diagnose instead of asking them to describe it.
It admits what it does not know
When your knowledge does not cover something, it says so and offers to pass the question to you, rather than inventing a returns policy.
It hands you the leads
Pre-sales questions from signed-out visitors turn into captured email addresses instead of a closed tab.
Questions
Do I need WooCommerce for this plugin to be useful?
No. It works on any WordPress site and answers from your pages and documents. WooCommerce order lookup is an addition that switches itself on when it finds a shop and a signing secret.
Could one customer ever see another customer's orders?
No. The customer id comes from a token your WordPress site signs, never from the visitor or the AI model, and each request is signed with an HMAC covering that id. A signature for one shopper cannot fetch another's orders. We test exactly this case, including the negative one.
What about customers who are not signed in?
They get no order data at all. The agent explains where to find their confirmation email and offers to take their address so you can follow up, which turns a dead end into a lead.
Does it handle tracking numbers?
Yes, when the order has one. It reads the common tracking fields, including those written by the popular shipment tracking plugins, and says plainly when a tracking number does not exist yet.
What does it cost?
Free to start: 50 messages a month, no card. Paid plans begin at $14.99 a month for 250 messages. See pricing for the rest.
Try it on your own shop first
Build an agent from your website address in about a minute. No signup, no card, nothing to install.
Try it on my site Create a free account