A spec-compliant OAuth 2.1 server, per-agent permissions, and a human approval queue. Connect Claude, ChatGPT, or Cursor in one click. You own every endpoint — no SaaS, no phone-home.
The demo site is a live WooCommerce install with Agent Gateway active. Every endpoint below is served by the plugin, right now.
agent-gateway-demo.instawp.site
WooCommerce storefront with sample products. An AI shopping agent has already placed a governed draft order on this site.
Protected resource metadata (RFC 9728)
Authorization server metadata (RFC 8414)
Point MCP Inspector, Claude, ChatGPT, or Cursor at
https://agent-gateway-demo.instawp.site/wp-json/agw/mcp
Discovery, registration, and PKCE happen automatically. Consent requires the site owner login, which is how the plugin keeps strangers out.
Built on the official WordPress Abilities API and MCP adapter. Everything runs on your own domain.
PKCE (S256), dynamic client registration, discovery metadata, audience-bound opaque tokens, and revocation — the full spec, same-origin.
Each agent is its own zero-capability identity — never a real admin user. Permissions are granted per-agent, per-ability, and revocable live.
Hold write actions for human approval, with constraint-based auto-approval, a full audit log, a kill switch, and per-agent dry-run mode.
Product search, stock, shipping estimates, order status, draft orders, and returns — all governed, with agent-attributed orders.
A self-test probes discovery, the Authorization header, caching, and a full OAuth + MCP round-trip — catching host issues before your clients do.
Secrets stored only as hashes, constant-time comparison, token-family reuse detection, and virtual-capability isolation. No secrets in plaintext, ever.
Real screens from the plugin admin — the governance surface your customers never see, and the connect flow they do.
Agents register automatically over standard OAuth 2.1. You approve exactly which permissions each one receives on a clear consent screen.
Set every ability to allow, hold, or deny. Cap calls per hour and add JSON auto-approve constraints — for example, auto-approve draft orders under a set value.
Every held action lands here with the agent, exact arguments, and expiry. Approve in one click — it executes as the agent, never as your admin account.
An append-only log records every consent, call, hold, and approval with outcomes and timings. See all connected agents and revoke any of them instantly.
The self-test verifies discovery documents, Authorization-header pass-through, caching, and a complete register → PKCE → MCP → revoke walk.
No credential copying, no external service.
Paste your site's MCP URL into Claude, ChatGPT, or Cursor as a remote MCP server.
The agent registers itself and opens your consent screen. Grant a subset of scopes — or none.
Set policies per ability. Risky actions wait in the queue for your one-click approval.
Auto-enabled when WooCommerce is active. Read abilities run freely; write abilities default to hold.
Add your own abilities via a filter — they flow through the same scope, grant, policy, and queue machinery.