# Install on WordPress and WooCommerce

> Download the plugin with your site ID and store key already filled in, upload it, activate. About two minutes.

The WordPress plugin enforces your block rules on the server, before a page renders: an agent you blocked in [/app](https://tryostia.com/app) gets a plain-text 403, and people and search engines get the normal page. On WooCommerce it also sends the orders that came from an AI agent, so /app can count them.

Requirements: WordPress 6.0+, PHP 8.0+, WooCommerce 8.0+ for the store features.

## Steps

1. Go to [/start](https://tryostia.com/start), pick **WooCommerce** and sign in (the first sign-in creates your account).
2. Click **Download the plugin**. The ZIP already holds your site ID, and your store key when the store is new. Keep the ZIP private.
3. In WordPress open **Plugins > Add New > Upload Plugin**, upload the ZIP and click **Activate**. The settings fill in on activation.
4. Open **WooCommerce > Ostia**. **Mode** starts on **Observe only**: visits are recorded and nothing changes for visitors. Leave it a week, then switch to **On**.

If you added the store before and the ZIP has no key, paste the store key you saved into the **Store key** field. It is used server-side only and is never shown again.

## Settings

| Field | What it does |
|---|---|
| Network URL, Site ID | Filled in for you |
| Store key | Secret, server-side only. Leave blank to keep the current key |
| Mode | **Observe only** (record only) or **On** |

## Blocking agents

On each request that names an AI agent, the plugin asks the network for your store's rules. A blocked agent gets an HTTP 403 with a short plain-text note: this store does not accept visits from this automated agent. Nothing is hidden in the page and no page is rewritten.

- People and search engines (Google, Bing, Apple and the like) are never blocked.
- The check has a half-second limit. If it is slow or fails, the visit is allowed.
- The rules are the ones you set in [/app](https://tryostia.com/app) > **Block or allow**. Observe only mode does not change this: use your rules to choose.

## Pages the plugin adds

- `/llms.txt` for AI assistants,
- a product feed for agents.

If those pages answer 404, open **Settings > Permalinks** and click **Save** once.

## No WooCommerce?

On a plain WordPress site, the [script tag](/docs/install-script-tag) works too: paste it with any header/footer code plugin, or in your theme's `footer.php` before `</body>`.

## Uninstall

Deactivate and delete the plugin. Its settings are removed. Order notes it added stay on past orders.

Source: https://tryostia.com/docs/install-wordpress