Tactical — AI Agent Detection for WooCommerce for WordPress Plugin Directory

Most AI retrieval crawlers — the bots that feed ChatGPT, Perplexity, Claude, and Google’s AI answers — do not run JavaScript, so JavaScript-only analytics (including standard site analytics) never see them. This plugin adds server-side detection: when a known AI crawler requests a page, Tactical records it — no JavaScript required. Human visitors are untouched (an event fires only on a matched AI user-agent), so there’s zero measurable impact on page speed.

AI shopping agents and crawlers from ChatGPT, Perplexity, Claude, and Google AI visit your storefront every day — fetching products, comparing prices, deciding what to recommend. This plugin makes that traffic visible: which AI fetched which product pages, what shopping agents did on-site, and which humans arrived from AI answers.

This plugin connects your WooCommerce store to Tactical, a third-party agent-traffic intelligence service operated at https://tactical-app.work. The plugin handles install, snippet injection, and WooCommerce webhook registration; the dashboard, alerts, and reporting live in your Tactical account on tactical-app.work.

What you get:

Agent Traffic Monitor — real-time counts of agent visits broken down by agent type, day, and product

Intent Signals — score every session by browse vs. buy intent; compare agent vs. human conversion

Competitive Exposure (paid plans) — see which competitors are sending agents to check your prices

Why agent traffic matters now:

Standard analytics filter agent traffic out as “bot noise”. As of Q2 2026, AI agents make up an estimated 8–12% of e-commerce site visits — and that share is growing month over month. The merchants who see this traffic are the ones positioned to capture the buyers it represents.

Tactical pricing — managed at tactical-app.work:

Tactical is a tiered SaaS product. The plugin works on every tier, including the free one.

Scout — $0/mo (free forever) — Tactical’s free tier. 100 agent sessions/week, top 3 agent types, weekly intelligence brief. No credit card.

Radar — $39/mo — 90-day history, all agent types, intent signals, product interest map (10,000 sessions/mo)

Command — $129/mo — competitive exposure, revenue leakage estimates, custom competitor tracking, unlimited products (50,000 sessions/mo)

Annual plans save ~25%.

Multi-platform:

This plugin is for WooCommerce. The same Tactical account also works on Shopify (via the Shopify App Store) and on any custom storefront (via JS snippet at tactical-app.work).

External services This plugin connects to Tactical at https://tactical-app.work — a third-party agent-traffic intelligence service operated by the plugin author. The plugin requires an active Tactical account (free Scout tier is sufficient) to function. Without an API key configured on the settings page, no requests are made.

Endpoints used:

Snippet ingest — https://tactical-app.work/api/ingest. The detection script (https://tactical-app.work/snippet.js) loads on every storefront page view and posts an event payload containing: an anonymised session ID, page URL (path + query string only), referrer domain, user-agent string, scroll/mouse/timing heuristics, and your store’s API key. No customer PII (no names, emails, IP addresses, payment data, or form contents) is sent.

Connection verification — https://tactical-app.work/api/verify-connection. Triggered only when an admin clicks “Verify connection” on the settings page. Sends only your API key (in a request header) so Tactical can confirm the key belongs to this store. No event data.

WooCommerce webhooks — https://tactical-app.work/api/wc-webhook/<topic>. On plugin activation, three webhook subscriptions are registered with WooCommerce (order.created, order.updated, product.created, product.updated). WooCommerce delivers these payloads directly to Tactical with WC’s standard HMAC signature when matching events occur on your store. Payload contents are WooCommerce’s standard webhook bodies (order or product objects).

Conditions: events are only sent after you paste a valid API key on the settings page. Without a key, the snippet does not load, no requests are made, and no webhooks are registered.

Service terms:

Tactical Privacy Policy: https://tactical-app.work/privacy

Tactical Terms of Service: https://tactical-app.work/terms