# Ostia: full docs

> Every docs and how-to page from https://tryostia.com, as markdown.

## Quick start

> Add Ostia to your store in about two minutes and see your first AI agent visits.

Ostia shows which AI agents visit your store (ChatGPT, Claude, Gemini, Perplexity and others), what they read, and lets you allow or block each one. Setup is one tag, a plugin or a Cloudflare worker.

### 1. Sign in and add your store

Open [https://tryostia.com/start](https://tryostia.com/start) and pick your platform. Sign in with Google or an email link; the first sign-in creates your account. Enter your store address. You get:

- your **site ID** (made from your domain, like `shop-example-com`),
- the **script tag** for your store,
- a **store key**, shown once, for server-side installs (the WordPress plugin and the store API). Keep it out of code repositories.


### 2. Install

Pick the guide for your platform:

| Platform | How | What it does | Time |
|---|---|---|---|
| Shopify | [Theme tag](/docs/install-shopify) in `theme.liquid` | Sees visits. Rules apply on our app's pages; for full blocking add Cloudflare | 2 minutes |
| WordPress / WooCommerce | [Plugin](/docs/install-wordpress), downloaded with your settings filled in | Sees visits and enforces your rules on every page | 2 minutes |
| Cloudflare (any site behind Cloudflare) | [API token flow](/docs/install-cloudflare): paste a token, we add one worker | Sees visits and enforces your rules on every page | 2 minutes |
| Any other site | [Script tag](/docs/install-script-tag) before `</body>` | Watch only: sees visits, does not block | 1 minute |
| Next.js, Remix, Astro, static HTML | [Script tag](/docs/install-script-tag#where-to-paste-it) in your layout file | 1 minute |

The tag is:

```html
<script src="https://api.tryostia.com/s/<your-site-id>/a.js" data-endpoint="https://api.tryostia.com/s/<your-site-id>" async></script>
```

### 3. Check it works

Open your store once in a browser. On [/app](https://tryostia.com/app), the **Install** section turns to **Seeing traffic** within a minute or so. It rechecks every 15 seconds; **Check now** runs it at once.

### 4. Read your first numbers

Agent visits show up in [/app](/docs/app) as they happen. Most stores see their first AI agent within a day. From there:

- [Allow or block](/docs/rules) each agent.
- Turn on the [weekly report](/docs/weekly-report).

### Using an AI assistant?

Paste one of the [ready prompts](/docs/ai-prompts) into Claude, Cursor or ChatGPT and it does the install with you.

Source: https://tryostia.com/docs/quick-start

---

## Prompts for AI assistants

> Copy-paste prompts that get Claude, Cursor or ChatGPT to add Ostia to your store, step by step.

Paste one of these into your assistant. Each one points it at these docs, so it uses the current steps instead of guessing.

### Claude (claude.ai or the desktop app)

Claude can read web pages. Paste the prompt for your platform, then follow along; Claude tells you each click.

```text
Help me add Ostia to my store. Read https://tryostia.com/llms.txt and then the install guide for my platform.
My store is https://MYSTORE.COM and it runs on PLATFORM (Shopify / WooCommerce / Cloudflare / custom site).
Walk me through it one step at a time, wait for me to say "done" after each step, and finish by telling me how to check it works.
```


### Claude Code or Cursor (in your site's code)

Open your store's project (Shopify theme, Next.js, Remix, Astro or static site) in Claude Code or Cursor's Agent mode.

First get your tag: sign in at [/start](https://tryostia.com/start), add your store and copy the script tag. Then paste:

```text
Add Ostia to this project. Read https://tryostia.com/docs/install-script-tag.md first.
Put this exact tag just before </body> in the shared layout (theme.liquid, app/layout.tsx, pages/_document.tsx, app/root.tsx, the Astro base layout, or every .html page):
PASTE-YOUR-TAG-HERE
Use is:inline on the script tag in Astro. Change nothing else, and do not write any key or token into the repository.
Show me the diff and tell me how to deploy and check the install.
```

### ChatGPT

ChatGPT reads web pages when you ask it to search or browse.

```text
Read https://tryostia.com/llms.txt and the Ostia install guide for PLATFORM.
Then give me numbered steps to add it to my store https://MYSTORE.COM, using the exact menu names from the guide.
Ask me which step I am on if I get stuck.
```

### Per platform, the short version

Paste after any of the prompts above to skip straight to the right guide:

| Platform | Add this line |
|---|---|
| Shopify | `Use https://tryostia.com/docs/install-shopify.md (paste the tag in layout/theme.liquid before </body>; it watches visits only).` |
| WooCommerce | `Use https://tryostia.com/docs/install-wordpress.md (download the plugin from /start, upload, activate).` |
| Cloudflare | `Use https://tryostia.com/docs/install-cloudflare.md (create the API token with the three permissions, paste it on /start).` |
| Any other site | `Use https://tryostia.com/docs/install-script-tag.md (one tag before </body> on every page).` |

### Why .md links

Every docs page has a plain markdown copy: add `.md` to the URL. [llms.txt](/llms.txt) lists them all and [llms-full.txt](/llms-full.txt) has everything in one file. Assistants read these faster and more accurately than the HTML pages.

Source: https://tryostia.com/docs/ai-prompts

---

## Install on Shopify

> Watch visits with one tag in theme.liquid. Your rules apply on our app's pages; for full blocking, put the store behind Cloudflare.

On Shopify you can watch visits today and apply your block rules on our app's own pages. You cannot block agents on your theme pages from inside Shopify. Shopify serves those pages itself, and an app only reaches paths under `/apps/...`.

| What you want | How |
|---|---|
| See agent visits | The tag below (watch only) |
| Your block rules on the agent cart, product feed and store facts pages | The Shopify app, once it is in the App Store. A blocked agent gets a plain-text 403 there |
| Block agents on every page of the store | Put the store's domain behind Cloudflare and use the [Cloudflare install](/docs/install-cloudflare) |

Our Shopify app is not in the App Store yet. Until it is, the tag is the install.

### Steps

1. Sign in at [/start](https://tryostia.com/start), pick **Shopify** and add your store. Copy the tag.
2. In Shopify admin open **Online Store > Themes**. On your live theme click **...** then **Edit code**.
3. Open `layout/theme.liquid`, find `</body>` near the end and paste the tag on the line before it. Click **Save**.
4. Open your store once. [/app](https://tryostia.com/app) shows **Seeing traffic** when the first visit arrives.

```html
<script src="https://api.tryostia.com/s/<your-site-id>/a.js" data-endpoint="https://api.tryostia.com/s/<your-site-id>" data-holdout="0" async></script>
```


### When you change themes

The tag lives in the theme. If you publish a different theme, paste it there too.

### What the app will add

Once the app is live, installing it replaces the tag with a theme app embed (no code), creates the store for you, and adds order attribution and the reports page. We will email existing stores when it is available.

### Remove it

Delete the line from `theme.liquid` and save.

Source: https://tryostia.com/docs/install-shopify

---

## Install on WordPress and WooCommerce

> Download the plugin with your site ID and store key already filled in, upload it, activate. About two minutes.

The WordPress plugin enforces your block rules on the server, before a page renders: an agent you blocked in [/app](https://tryostia.com/app) gets a plain-text 403, and people and search engines get the normal page. On WooCommerce it also sends the orders that came from an AI agent, so /app can count them.

Requirements: WordPress 6.0+, PHP 8.0+, WooCommerce 8.0+ for the store features.

### Steps

1. Go to [/start](https://tryostia.com/start), pick **WooCommerce** and sign in (the first sign-in creates your account).
2. Click **Download the plugin**. The ZIP already holds your site ID, and your store key when the store is new. Keep the ZIP private.
3. In WordPress open **Plugins > Add New > Upload Plugin**, upload the ZIP and click **Activate**. The settings fill in on activation.
4. Open **WooCommerce > Ostia**. **Mode** starts on **Observe only**: visits are recorded and nothing changes for visitors. Leave it a week, then switch to **On**.

If you added the store before and the ZIP has no key, paste the store key you saved into the **Store key** field. It is used server-side only and is never shown again.

### Settings

| Field | What it does |
|---|---|
| Network URL, Site ID | Filled in for you |
| Store key | Secret, server-side only. Leave blank to keep the current key |
| Mode | **Observe only** (record only) or **On** |

### Blocking agents

On each request that names an AI agent, the plugin asks the network for your store's rules. A blocked agent gets an HTTP 403 with a short plain-text note: this store does not accept visits from this automated agent. Nothing is hidden in the page and no page is rewritten.

- People and search engines (Google, Bing, Apple and the like) are never blocked.
- The check has a half-second limit. If it is slow or fails, the visit is allowed.
- The rules are the ones you set in [/app](https://tryostia.com/app) > **Block or allow**. Observe only mode does not change this: use your rules to choose.

### Pages the plugin adds

- `/llms.txt` for AI assistants,
- a product feed for agents.

If those pages answer 404, open **Settings > Permalinks** and click **Save** once.

### No WooCommerce?

On a plain WordPress site, the [script tag](/docs/install-script-tag) works too: paste it with any header/footer code plugin, or in your theme's `footer.php` before `</body>`.

### Uninstall

Deactivate and delete the plugin. Its settings are removed. Order notes it added stay on past orders.

Source: https://tryostia.com/docs/install-wordpress

---

## Install on Cloudflare

> If your site is behind Cloudflare, paste one API token and we add a small worker that puts the tag on every page.

Any site whose domain runs through Cloudflare (orange cloud) can install without touching the site's code. This is full protection: the worker enforces your block rules on every page, so it also covers Shopify and any other store that sits behind Cloudflare.

### Steps

1. Go to [/start](https://tryostia.com/start), pick **Cloudflare** and enter your store address.
2. Click **Create the token in Cloudflare**. The link opens Cloudflare with three permissions filled in:

| Permission | Access | Why |
|---|---|---|
| Account: Workers Scripts | Edit | to add the worker |
| Zone: Workers Routes | Edit | to add the route for your host |
| Zone: Zone | Read | to find your zone |

3. Create the token, copy it, paste it on /start and click **Connect and install**. You see each step as it runs.
4. Open your store once. [/app](https://tryostia.com/app) shows **Seeing traffic** when the first visit arrives.

We use the token once, for those few calls, and never keep it: it is not stored, logged or put in a URL. You can delete the token in Cloudflare right after. Your store key is saved in the worker as an encrypted secret named `STORE_KEY`.

### What gets added

One small worker and one route, `<your host>/*`. The worker passes every request to your site unchanged, adds the script tag to HTML pages, and answers an agent you blocked in [/app](https://tryostia.com/app) with a plain-text 403 (People and search engines always get your normal site). With `STORE_KEY` set, it also counts each visit after your page is sent, so AI assistants and crawlers that never run scripts show up too. If anything in it fails, visitors get your site's own response. Nothing else on your zone is changed.

### By hand instead

On /start, the Cloudflare step also shows the worker script and these steps:

1. In Cloudflare open **Workers & Pages > Create > Start with Hello World**, name it and deploy.
2. Open **Edit code**, replace everything with the script from /start and deploy again.
3. Open the worker's **Settings > Domains & Routes > Add > Route**. Route `<your host>/*`, your zone. Save.
4. Open **Settings > Variables and Secrets > Add**, type **Secret**, name `STORE_KEY`, value your store key. Deploy.

### Your site is a Cloudflare Worker already?

The same install works. The route runs before your site's worker, sees each request first and hands it on unchanged.

### Remove it

Delete the route and the worker in the Cloudflare dashboard.

Source: https://tryostia.com/docs/install-cloudflare

---

## Install with a script tag (watch only)

> One line before </body> works on any site and shows you the visits. It does not block anything.

The script tag works on any site where you can edit the page template. It is **watch only**: it sees visits and never blocks. To enforce your block rules, use the [WooCommerce plugin](/docs/install-wordpress) or the [Cloudflare install](/docs/install-cloudflare).

### Steps

1. Sign in at [/login](https://tryostia.com/login) and add your store, or go through [/start](https://tryostia.com/start). Copy the tag shown for your store.
2. Paste it just before `</body>` on every page. Most sites have one shared footer or layout file for this.
3. Publish, then open your store once. [/app](https://tryostia.com/app) shows **Seeing traffic** when the first visit arrives.

```html
<script src="https://api.tryostia.com/s/<your-site-id>/a.js" data-endpoint="https://api.tryostia.com/s/<your-site-id>" data-holdout="0" async></script>
```

### Options

| Attribute | Values | What it does |
|---|---|---|
| `data-endpoint` | your store's endpoint | Where visits are sent. Leave it as given. |

The tag loads asynchronously and never blocks the page. If our service is unreachable, your page loads as normal.

### What the tag can and cannot see

The tag sees AI agents that open your pages in a browser, which is how browser-based agents such as ChatGPT agent and Claude in Chrome shop. Agents that only fetch the raw HTML and never run scripts are not seen by a tag. If your site is behind Cloudflare, the [Cloudflare install](/docs/install-cloudflare) covers both.

### Where to paste it

| Stack | File |
|---|---|
| Plain HTML | every `.html` page, before `</body>` |
| Next.js (App Router) | `app/layout.tsx`, inside `<body>` |
| Next.js (Pages Router) | `pages/_document.tsx`, before `</body>` |
| Remix / React Router | `app/root.tsx`, before `</body>` |
| Astro | your base layout, as `<script is:inline ...>` |
| Webflow, Squarespace, Wix | the site-wide custom code footer setting |


### Remove it

Delete the line and publish. Nothing else stays on your site.

Source: https://tryostia.com/docs/install-script-tag

---

## What you see in /app

> The owner dashboard at /app: agent visits by vendor, the pages agents read, block/allow, the weekly report and the install check.

[/app](https://tryostia.com/app) is your store's dashboard. Sign in with the same Google account or email you used to add the store. With more than one store, pick it at the top.

### Agent visits

- Switch between the **last 7 days** and **last 30 days**.
- **Total agent visits**, with the change against the period before.
- **Agent visits by vendor**: one card each for OpenAI, Anthropic, Google, Perplexity, The Browser Company and unbranded agents. Each card has the count, the change, a daily line and the agents behind it (for example ChatGPT and OpenAI crawlers under OpenAI).

### What they read

Which pages agents open, by page type (product pages, category pages, cart, checkout and so on). Filter by agent with the chips above the table. The top 12 rows show.

### Block or allow

One switch per agent, grouped by vendor, with its visits in the last 30 days. Change the switches, check the preview of what changes, then **Save rules**. See [block/allow rules](/docs/rules).

Agents marked **In testing** are still being verified on our side, the same as on [/proof](https://tryostia.com/proof).

### Weekly report

Turn on **Email a weekly summary every Monday** and add up to 5 addresses. See [the weekly report](/docs/weekly-report).

### Install

- **Seeing traffic**: a visit arrived in the last 15 minutes.
- **Installed**: we have seen your store before, but not in the last 15 minutes.
- **Not seeing traffic yet**: open your store in a browser, then **Check now**.

Tabs show the steps for Shopify, WooCommerce, Cloudflare and Any other site (script tag), with a copy button for the tag. WooCommerce and Cloudflare enforce your block rules on every page; Shopify sees visits and applies rules on our app's pages; the script tag is watch only.

### Not in /app yet

Revenue and orders by assistant are in the [weekly report](/docs/weekly-report). You can also pull numbers with the [store API](/docs/api).

### The public demo

[/dashboard](https://tryostia.com/dashboard) is a public demo on a demo store. It shows more views than /app has today (AI answers, a rules playground). Rules you set there are kept in your browser only and never affect a real store.

Source: https://tryostia.com/docs/app

---

## Block and allow AI agents

> Choose which AI agents can use your store. Everything is allowed until you block it, and people are never blocked.

Every store starts with every agent **allowed**. You block the ones you do not want; people are never blocked.

### The agents you can switch

| Agent | ID | Vendor |
|---|---|---|
| ChatGPT | `chatgpt` | OpenAI |
| ChatGPT search | `openai-search` | OpenAI |
| OpenAI training | `openai-training` | OpenAI |
| Claude | `claude` | Anthropic |
| Claude search | `claude-search` | Anthropic |
| Claude training | `claude-training` | Anthropic |
| Gemini (in testing) | `gemini` | Google |
| Perplexity (in testing) | `perplexity` | Perplexity |
| Dia (in testing) | `dia` | The Browser Company |
| Browser agents | `browser-agents` | unbranded |
| Other crawlers | `other-crawlers` | unbranded |
| Scripts and scrapers | `scripts` | unbranded |
| Fake AI visitors | `fake-agents` | unbranded |

The IDs are what the [API](/docs/api) uses.

The old `openai-crawlers` and `claude-crawlers` IDs still work. Each old ID applies the same choice to both its search and training rules.

### Change a rule

1. Open [/app](https://tryostia.com/app) > **Block or allow**.
2. Flip the switch for each agent.
3. Check the preview and click **Save rules**.

Rules reach your store within about a minute.

### What a blocked agent gets

| Install | What the blocked agent sees |
|---|---|
| Cloudflare worker | an HTTP 403 with a short plain-text note: this store does not accept visits from this automated agent |
| WordPress / WooCommerce plugin | the same HTTP 403 and note, before the page renders |
| Shopify app | the same 403 on the app's own pages (agent cart, product feed, store facts). Your theme pages are served by Shopify, so rules do not reach them; put the store behind Cloudflare for that |
| Script tag / theme tag (watch only) | your normal page: the tag never changes what anyone sees, so rules are not enforced there |

People always get your normal site. Search engines (Google, Bing, Apple and the like) always get your normal site too: no rule applies to them. If our service cannot be reached, everyone is allowed: a rule never takes your store down.

### Search and AI answers

Blocking training keeps those crawlers from using your pages for model training without removing the pages from ChatGPT or Claude search. Blocking a search rule can keep your products out of AI answers and AI search. Block shopping agents only if you are sure you do not want those orders. A common setup: allow ChatGPT, Claude and their search rules; block training, scripts, scrapers and fake AI visitors.

### Platform notes

- **Cloudflare and WordPress / WooCommerce:** full protection. Both enforce the /app switches on every page. The plugin's **Mode** (Observe only / On) only controls its agent features.
- **Shopify:** watch plus rules on our app's own pages (the app is coming). For full blocking, run the store behind Cloudflare.
- **Any other site (script tag):** watch only.

### By API

```sh
curl -X PUT https://tryostia.com/api/v1/stores/<site-id>/rules \
  -H "Authorization: Bearer agt_..." -H "content-type: application/json" \
  -d '{"rules": {"scripts": "block", "fake-agents": "block"}}'
```

Needs a token with write access. See [the API reference](/docs/api).

Source: https://tryostia.com/docs/rules

---

## The weekly report

> A Monday email with last week's agent visits, agent orders and revenue, and one fix for your store.

Every Monday, a short email with what AI agents did on your store last week.

### What is in it

- Agent visits, people visits, agent orders and agent revenue, against the week before.
- Visits by assistant (ChatGPT, Claude, Gemini, Perplexity and others).
- Contact attempts (chat, WhatsApp, phone, email, contact page) by agents and by people.
- Orders and revenue by assistant, where order data is connected.
- One fix from the store audit.
- A link to your dashboard.

### Turn it on or off

1. Open [/app](https://tryostia.com/app) > **Weekly report**.
2. Tick **Email a weekly summary every Monday**.
3. Add up to 5 addresses, separated by commas. Save.

Untick it to stop. It is sent on Mondays at 14:00 UTC.

Source: https://tryostia.com/docs/weekly-report

---

## API reference

> The public endpoints store owners and developers use: token API, store key API, install check, audit and the device-code approval flow.

Two hosts, three kinds of credentials. Every answer is JSON unless noted. Errors are `{ "ok": false, "error": "<one plain sentence>" }`.

| Credential | Where you get it | Used for |
|---|---|---|
| **API token** `agt_...` | the [device-code approval](#device-code-approval) with `client: "mcp"` | read stores, visits and rules on `https://tryostia.com/api/v1` |
| **Store key** | shown once when a store is added | server-side store API on `https://api.tryostia.com/api/store` |
| **Session** | signing in on the site | the browser app (`/app`, `/api/me`) |

API tokens are read-only unless created with write access. Keep tokens and keys in environment variables or a secret store, never in code you commit.

### Token API

Base: `https://tryostia.com`. Header: `Authorization: Bearer agt_...`. 60 requests a minute per IP.

| Method and path | Answer |
|---|---|
| `GET /api/v1/stores` | `{ stores: [{ id, domain, platform }] }` |
| `GET /api/v1/stores/{id}/overview` | visits for the last 30 days and the 30 before: `totals` (`last7`, `prev7`, `last30`, `prev30`, `daily`), `vendors[]` with `agents[]`, and `pages[]` |
| `GET /api/v1/stores/{id}/rules` | `{ rules: [{ id, vendor, name, action, testing, updatedAt }] }` |
| `PUT /api/v1/stores/{id}/rules` | body `{ rules: { "<agent id>": "allow" or "block" } }`, write tokens only |
| `GET /api/v1/stores/{id}/report` | weekly report settings `{ enabled, recipients }` |
| `GET /api/v1/stores/{id}/install` | `{ siteId, domain, platform, seen, lastSeenAt }` |

Agent IDs are listed on [block/allow rules](/docs/rules).

```sh
curl -H "Authorization: Bearer $TOKEN" https://tryostia.com/api/v1/stores
```

### Store key API

Base: `https://api.tryostia.com`. Header: `Authorization: Bearer <store key>`. Ranges go up to 93 days.

| Method and path | Answer |
|---|---|
| `GET /api/store/summary?from=&to=` | visits, orders, revenue and contact attempts for the range |
| `GET /api/store/export.csv?table=daily or assistants or orders&from=&to=` | CSV  |
| `GET /api/store/destinations` | webhooks, Slack and GA4 destinations |
| `POST /api/store/destinations` | add one: `{ kind: "webhook" or "slack", url }` or `{ kind: "ga4", measurement_id, api_secret, region? }`. A webhook's `signingSecret` is in this answer only |
| `PATCH /api/store/destinations/{id}` | `{ active?, events?, summary? }` |
| `DELETE /api/store/destinations/{id}` | 204 |
| `POST /api/store/destinations/{id}/test` | sends a test event |
| `GET /api/store/destinations/{id}/deliveries` | the newest 50 deliveries |
| `POST /v1/attribution/orders` | report an order from your own backend: `{ order_id, total, currency, operator, agent_class, visitor_type, agent_code, arm }`. 204 new, 200 duplicate |

### No credential

| Method and path | Answer |
|---|---|
| `GET https://tryostia.com/api/install-check?url=` | `{ ok, seen }`: has this store sent a visit in the last 7 days. 10 a minute per IP |
| `GET https://tryostia.com/api/audit?url=` | the free audit as JSON: `score`, `grade`, `summary`, `sections`, `fixes`. Can take up to a minute |
| `GET https://tryostia.com/audit?url=` | the same audit as a page |

### Device-code approval

Lets your own tool add a store or get an API token, with the owner approving in the browser. No password or cookie passes through your tool.

1. `POST https://tryostia.com/api/cli/start` with `{ "client": "cli", "url": "https://shop.example.com" }` (or `{ "client": "mcp", "scope": "read" }`). The answer has `device_code`, `user_code`, `verification_uri_complete`, `interval` (seconds) and `expires_in` (600).
2. Show the owner `verification_uri_complete`. They sign in and approve the code.
3. `POST https://tryostia.com/api/cli/poll` with `{ "device_code": "..." }` every `interval` seconds. The answer is `{ status: "pending" }` until it is `approved` (with `store`, `snippet` and, for a new store, `key`; or `token` and `scope` for MCP), `denied` or `expired`. The approved answer is given once.

### Session endpoints (browser)

`GET /api/me`, `GET|POST /api/me/stores`, `GET|PUT /api/app/stores/{id}/...` and `GET|POST|DELETE /api/tokens` are used by the site itself with the sign-in cookie. POSTs must come from the site's own origin.

Source: https://tryostia.com/docs/api

---

## Docs FAQ

> Short answers about setup, speed, privacy, plans, tokens and removing Ostia.

### Does it slow my store down?

No. The tag loads asynchronously after the page, and if our service is unreachable your page loads as normal. The Cloudflare worker passes requests straight through and falls back to your site's own response on any error.

### Will real customers notice anything?

No. People always get your normal site. Blocking applies to AI agents only.

### How do you know a visitor is an AI agent?

We test against real AI agents and publish what we recognise, and what is still in testing, on [/proof](https://tryostia.com/proof). We do not publish how, so it keeps working.

### Which agents do you recognise?

ChatGPT (agent and search), Claude and Claude crawlers, Codex, Claude Code, OpenAI crawlers, scripts, scrapers and fake AI visitors today. Gemini, Perplexity, Dia and others are in testing. The current list is on [/proof](https://tryostia.com/proof).

### What do you store?

Visit counts per agent, page types, contact attempts by kind, and agent orders (order ID, total, currency). No IP addresses, no page content, and no customer names, emails, phones, addresses or payment details. Details are on [/privacy](https://tryostia.com/privacy).

### Does it set cookies?

No advertising or third-party cookies. On WooCommerce, a first-party cookie links an AI agent's visit to its order so the order can be counted. It holds no personal details. See [/privacy](https://tryostia.com/privacy).

### Is the store key or token safe in my repository?

No. The script tag holds no secret and is fine to commit. The store key and API tokens are secrets: keep them in plugin settings, environment variables or a secret store.

### I lost my store key.

Contact us from [/contact](https://tryostia.com/contact). The script tag does not need it; only the WordPress plugin and the store API do.

### How do I revoke an API token?

Tokens can be deleted by the account that made them (`DELETE /api/tokens/{id}` while signed in; a button in /app is coming). Contact us if you need one revoked now.

### Several stores?

Add each one at [/login](https://tryostia.com/login). Each store has its own tag and site ID; /app has a store picker. How many stores you can run depends on the plan (see the table below); [contact us](/contact) for more.

### What does it cost?

The **Free** plan is $0, forever, with no card. You sign in with Google or an email link to start. See which AI agents visit your store. An AI visit is one visit to your store by an AI agent or AI bot. People visiting your store are never counted or billed.

|  | Free | Pro | Scale | Enterprise |
|---|---|---|---|---|
| Price | $0 | $29 / month per store | $299 / month | Custom |
| Card to start | No | Yes. Nothing is charged for the 14-day trial | Yes. Charged at once, no trial | Agreed with you |
| Stores | 1 | 1 | Up to 5 | Agreed with you |
| AI visits included | 50,000 / month | 250,000 / month | 2.5 million / month, shared across your stores | Agreed with you |
| Extra AI visits | Your store keeps working and you see an upgrade prompt | $5 for each extra 100,000 | $4 for each extra 100,000 | Agreed with you |
| Visit data kept | 7 days | 13 months | 13 months | Agreed with you |
| Weekly report by email | ✓ | ✓ | ✓ | ✓ |
| Support | Docs | Email | Priority | Custom contract, company sign-in and data processing agreement |

Pro starts with a 14-day free trial. Starting the trial asks for a card, and nothing is charged for 14 days. Scale has no trial and is charged by card at once. Details and the Enterprise rollout are on [/pricing](https://tryostia.com/pricing).

### How do I remove it?

Delete the tag, deactivate the plugin, or delete the Cloudflare worker and route. Store data is deleted within 30 days after your plan ends.

Source: https://tryostia.com/docs/faq

---

## How do I see if ChatGPT visits my store?

> Google Analytics mostly cannot tell you. Here is what can, and how to see ChatGPT visits on your own store in two minutes.

Short answer: install a tool that recognises AI agents on your pages, then look at its visits list. With Ostia that is one tag and about two minutes.

### Why your analytics does not show it

ChatGPT reaches stores in a few ways:

- **ChatGPT search** fetches a page when a user asks about products. It usually does not run your analytics script.
- **ChatGPT agent** opens your store in a real browser and shops for the user. To most analytics it looks like an ordinary visitor.
- **OpenAI crawlers** read your pages ahead of time for search and training.

Google Analytics may show some referrals from `chatgpt.com` when a person clicks a link in an answer. That is people arriving from ChatGPT, not ChatGPT itself visiting. Server logs show the crawlers if you know what to search for, but not the agent shopping in a browser.

### See it with Ostia

1. Go to [/start](https://tryostia.com/start), pick your platform and sign in.
2. Install: a [script tag](/docs/install-script-tag) on any site, the [WordPress plugin](/docs/install-wordpress), the [Cloudflare token flow](/docs/install-cloudflare) or the [Shopify theme tag](/docs/install-shopify).
3. Open [/app](https://tryostia.com/app). The **OpenAI** card counts ChatGPT and OpenAI crawler visits separately, with a daily line, and **What they read** shows which pages they opened.

You see real visits as they happen. Most stores see their first AI agent within a day.

### Without installing anything

The [free audit](https://tryostia.com/audit) checks how your store looks to AI shopping agents: whether they can find products, prices and checkout. It does not show past visits, but it shows what an agent would run into.

### Then what?

- Keep ChatGPT allowed if you want its orders; [block](/docs/rules) only scrapers and fake AI visitors.
- Get a [weekly email](/docs/weekly-report) with the numbers.

Source: https://tryostia.com/how-to/see-if-chatgpt-visits-my-store

---

## How to block AI agents on Shopify

> What Shopify lets you block on its own, what it does not, and how to allow or block each AI agent with a switch.

Short answer: Shopify's robots.txt can ask AI crawlers to stay away, but it cannot stop agents that shop in a browser, and it cannot tell you who came. Ostia shows you each agent, and the switches you set apply on our app's pages. For a block across the whole store, put it behind Cloudflare.

### What Shopify can do by itself

- **robots.txt**: Shopify lets you edit `robots.txt.liquid` in your theme (**Online Store > Themes > Edit code > Add a new template > robots**). You can add disallow rules for named AI crawlers such as GPTBot or ClaudeBot. Well-behaved crawlers follow it. It is a request, not a block, and agents acting for a shopper in real time often do not read it.
- **Bot protection** at checkout (Shopify's built-in) stops some automated checkouts, but not agents browsing your catalogue.

### See and choose each agent with Ostia

1. Go to [/start](https://tryostia.com/start), pick **Shopify** and sign in.
2. Paste the tag into `layout/theme.liquid` before `</body>` ([steps](/docs/install-shopify)).
3. In [/app](https://tryostia.com/app) > **Block or allow**, flip the switch for each agent you want to keep out (for example **Scripts and scrapers** and **Fake AI visitors**) and click **Save rules**.

The theme tag never changes your pages, so it does not turn agents away itself. Shopify serves your theme pages itself and an app only reaches paths under `/apps/...`, so your rules apply on our app's pages (agent cart, product feed, store facts) once the app is installed, not on the rest of the store. To block on every page, put the store's domain behind Cloudflare and use the [Cloudflare install](/docs/install-cloudflare). A blocked agent gets a plain "not accepted" answer. People and search engines always get your normal store, and if our service cannot be reached, everyone is allowed.

### Should you block them?

Think before blocking ChatGPT, Claude or Gemini. They are increasingly how shoppers find and buy products, and blocking them can keep your products out of their answers. Most stores block scrapers and fake AI visitors and allow the assistants. [/app](https://tryostia.com/app) shows how many visits each agent makes before you decide.

### Limits today

Our Shopify App Store app is not out yet, so the install is the theme tag, which only watches. The tag works on agents that open your store in a browser; crawlers that never run scripts are best handled with robots.txt as above.

Source: https://tryostia.com/how-to/block-ai-agents-on-shopify

---

## Which AI agents shop my WooCommerce store?

> Find out which AI agents visit and buy from your WooCommerce store, which pages they read and which orders they bring.

Short answer: install the Ostia WooCommerce plugin and open [/app](https://tryostia.com/app). You see each agent by name, how often it comes, what it reads, and, on WooCommerce, the orders it brings.

### What you will see

- **Agents by vendor**: OpenAI (ChatGPT, OpenAI crawlers), Anthropic (Claude, Claude crawlers), Google (Gemini), Perplexity, The Browser Company (Dia), and unbranded browser agents, scripts and scrapers.
- **Visits** for the last 7 and 30 days, with the change.
- **What they read**: product pages, category pages, cart, checkout.
- **Agent orders**, marked on each WooCommerce order and counted in /app. Revenue by assistant is in the [weekly report](/docs/weekly-report).

### Set it up (about two minutes)

1. Go to [/start](https://tryostia.com/start), pick **WooCommerce** and sign in.
2. Click **Download the plugin**. Your settings are already in the ZIP.
3. In WordPress: **Plugins > Add New > Upload Plugin**, upload, **Activate**.
4. Leave **Mode** on **Observe only** for the first week. Nothing changes for visitors; you just see who comes.

Full guide: [WordPress and WooCommerce](/docs/install-wordpress).

### After the first week

- Turn on the [weekly report](/docs/weekly-report).

Source: https://tryostia.com/how-to/which-ai-agents-shop-my-woocommerce-store

---

## AI agent traffic analytics for e-commerce

> How to measure AI agent traffic on an online store: which agents visit, what they read, what they buy, and what to do about it.

Short answer: web analytics counts people. AI agents need their own report: who they are, how often they come, what they read and what they buy. Ostia gives you that from one tag.

### What to measure

| Question | Where in Ostia |
|---|---|
| Which AI agents visit, and how often? | /app > Agent visits, by vendor and agent |
| Is it growing? | the 7 and 30 day change on each card |
| What do they read? | /app > What they read, by page type |
| Do they bring orders? | /app > orders, on WooCommerce |
| Do they try to contact us? | weekly report: contact attempts, agents against people |

### Why standard analytics misses it

Many agents never run analytics scripts, and the ones that shop in a browser look like ordinary visitors. Referral traffic from `chatgpt.com` or `perplexity.ai` is people clicking links in answers, which is useful but different: it is not the agent's own visit.

### Get it running

1. [Start free](https://tryostia.com/start): pick your platform and sign in.
2. Install with the [script tag](/docs/install-script-tag), [WordPress plugin](/docs/install-wordpress), [Cloudflare](/docs/install-cloudflare) or [Shopify theme tag](/docs/install-shopify).3. Read [/app](https://tryostia.com/app) and turn on the [weekly report](/docs/weekly-report).

### Ask instead of look

Source: https://tryostia.com/how-to/ai-agent-traffic-analytics-ecommerce