WooCommerce Integration

The WooCommerce integration connects a store to Convor with WooCommerce REST API keys and signed webhooks. Operators can test the saved API credentials, receive supported webhook events, and fetch recent orders for customer context.

Prerequisites

• WooCommerce 5.0 or later
• WooCommerce REST API enabled
• Admin access to the WooCommerce store
• A public HTTPS store URL in production
• Convor Growth plan or higher

Generate REST API Keys

In WordPress Admin, open WooCommerce, then Settings, then Advanced, then REST API. Click Add Key, name it Convor Integration, choose the user who owns the key, and set permissions to Read. Generate the key and copy both values.

Consumer Key:    ck_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Consumer Secret: cs_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Convor stores both values encrypted and only returns masked values in the dashboard.

Configure Signed Webhooks

In WooCommerce, open Settings, then Advanced, then Webhooks. Create one active webhook per topic you want to send to Convor, or create the topics required by your workflow. Use:

• Delivery URL: https://your-convor-domain.com/api/woocommerce/webhook
• Secret: the same webhookSecret value saved in Convor
• Status: Active

WooCommerce signs webhook payloads with X-WC-Webhook-Signature. Convor verifies the HMAC before acknowledging the event.

Dashboard Configuration

In Convor, open Integrations → WooCommerce. Enter:

• storeUrl: the WooCommerce store root, for example https://yoursite.com
• consumerKey: the REST API consumer key beginning with ck_
• consumerSecret: the REST API consumer secret beginning with cs_
• webhookSecret: the shared webhook signing secret
• topics: one or more supported webhook topics

{
  "integration": "woocommerce",
  "storeUrl": "https://yoursite.com",
  "consumerKey": "ck_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "consumerSecret": "cs_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "webhookSecret": "shared-webhook-secret",
  "topics": ["order.created", "order.updated"]
}

After the first save, all secrets are masked. When editing the store URL or topics, leave the credential fields blank to keep the saved encrypted values. Enter fresh values only when rotating credentials.

Supported Webhook Topics

Test and Cleanup

Use Test Connection after saving. Convor verifies the saved WooCommerce credentials against the store API. Disconnecting removes the saved WooCommerce configuration from Convor. Revoke or delete the REST API keys and webhooks in WooCommerce when you retire the connection.

Features

Troubleshooting

• Connection test fails: save the store root URL only, not /wp-json/; verify the key begins with ck_ and the secret begins with cs_.
• Webhooks return 401: confirm the webhook secret in WooCommerce exactly matches the masked secret saved in Convor.
• Webhooks return 404: confirm the store URL saved in Convor matches the WooCommerce store sending the webhook.
• API key invalid: WooCommerce keys can be revoked or trashed. Generate a new key and update Convor.