WooCommerce
Look up an order by number or find a customer's recent orders by their verified email.
A read-only WooCommerce REST API key lets the agent look up an order by its number, or find a customer's recent orders by the email they ordered with. Pair it with the WordPress plugin to put the widget on the same store.
What the agent can do
| Action | What it does | Input collected |
|---|---|---|
| Check WooCommerce order | Reports status, dates, total, currency and payment method for an order number. It confirms the returned number matches the one the visitor gave. | Order number, digits only |
| Find WooCommerce orders by email | Lists up to three recent orders (number, status, date, total) for an email address. Used when the visitor has no order number. | Email address |
Before you start
- A WooCommerce store served over HTTPS.
- Settings → Permalinks must not be set to Plain, or the REST API routes do not exist.
- An administrator account to create the key.
Connect WooCommerce
Create a read-only API key
In WordPress go to WooCommerce → Settings → Advanced → REST API → Add key. Description "PepoChat", User: an administrator, Permissions: Read, then Generate API key. Copy the Consumer key and Consumer secret right away; WooCommerce shows the secret only once.
Paste them into PepoChat
Open App Integrations → WooCommerce. Enter your store domain (
mystore.com, ormystore.com/shopif WordPress lives in a folder), the consumer key and secret, tick the actions you want, and click Add actions.Test, then enable
Test Check WooCommerce order with a real order number. Switch the actions on when the results look right.
Example
Visitor: I ordered beans last week but never got a confirmation.
Agent: I can look that up. What email did you order with?
Visitor: maya@example.com
Agent: Found two orders. #7790 from 23 September is processing, and #7731 from 16 September is completed. Which one did you mean?
Good to know
- WooCommerce order numbers are sequential and the lookup by number has no email check, so anyone who guesses a number can hear that order's status and total. If that matters to you, keep only the email lookup enabled, or ask visitors to verify their email in your action's "when to use" text.
- A 401 "Sorry, you cannot view this resource" with a correct key usually means your host strips the Authorization header. Ask them to pass it through; the usual fix is the
SetEnvIf Authorizationrule in.htaccess. It can also mean WordPress does not know it is behind HTTPS on a proxy. - Custom order numbering plugins change the visible number; the agent double-checks the returned number for this reason.
Something missing or wrong on this page? Tell us and we will fix it.
