Online stores are gradually entering an era where an artificial intelligence assistant can, with the appropriate permissions, read product and order information. On October 21, 2026, WooCommerce announced changes to how it supports such integrations, starting with version 11.3.
What Is MCP in Simple Terms
The Model Context Protocol (MCP) is a way for an AI program to communicate with external applications. In an e-shop environment, depending on permissions, it can allow catalog and order data to be retrieved or certain administrative tasks to be performed.
Example: Instead of opening multiple screens, the owner could simply ask, “Which products need a stock check?” However, this requires proper authentication, clearly defined permissions, and audit trails. It doesn’t mean that a store automatically gains these capabilities just because it upgrades.
What’s New in WooCommerce 11.3
According to the official technical blog, the new features for products and orders will be exposed through WordPress Abilities and the separate WordPress MCP Adapter extension. At the same time, the older endpoint /wp-json/woocommerce/mcp is being deprecated.
If a business had already connected an AI assistant to the old endpoint using a WooCommerce REST API key, the integration will need to be updated. The announcement describes a new way to connect via the MCP Adapter and a WordPress application password.
Who is affected in practice
- E-shop owners who are already using a custom AI integration with WooCommerce.
- Developers or companies that have connected custom tools to the old MCP endpoint.
- Teams planning to automate inventory and order management.
- Anyone planning to upgrade to version 11.3 who has such integrations.
If you have a standard WooCommerce store without an MCP connection, the announcement does not indicate that you need to install anything new immediately. This specific change primarily affects AI integrations, not the standard checkout process.
Before any upgrade
First, check whether your store has MCP integration and whether it uses the path that is being deprecated. Maintain a test environment and a backup, check plugin compatibility, and test authentication, product retrieval, and order processing where relevant connections exist.
Application keys must belong to a dedicated user with as few permissions as possible. No keys or passwords should be stored in public configuration files or in screenshots. Access that allows changes to actual orders requires special attention.
The Essence of the Change
WooCommerce is not announcing a ready-made “magic chatbot” that runs the store autonomously. It describes a more standardized technical framework for connecting AI with real-world data. The business value will depend on specific use cases, permissions, and secure design.
Original source: WooCommerce Developer Blog, October 21, 2026.