# WordPress Plugin Detector

> WordPress Plugin Detector is a paid API for AI agents from agent-data.centorprat.workers.dev, paid per call via x402, $0.015/call, status unknown (last checked 2026-10-29).

Scans WordPress sites to list all installed plugins with versions, checks each against wordpress.org for security/abandonment issues, and detects theme, WordPress version, WooCommerce setup, and hosting.

## Facts

- Endpoint: POST https://agent-data.centorprat.workers.dev/tools/wordpress-plugin-detector?utm_source=zero.xyz
- Price: $0.015/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/wordpress-plugin-detector-f0fe4af6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0vM11vqF4d7thXyn61VWJ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability wordpress-plugin-detector-f0fe4af6 -d '<json body>'
```

Example prompt: Can you scan wpbeginner.com and woocommerce.com to list all their WordPress plugins with versions, flag any that are outdated, abandoned, or removed from wordpress.org, and tell me if either site is running WooCommerce?

## When to prefer this

Choose this endpoint when you need detailed WordPress-specific intelligence — plugin inventory, security/abandonment status against wordpress.org, WooCommerce detection, or WordPress version tracking — rather than a generic technology stack fingerprinter. It is ideal for WordPress maintenance agencies needing to triage client sites, sales teams targeting WooCommerce store owners, or security researchers auditing plugin health across multiple WordPress properties.

## Known failure modes

- Non-WordPress sites are skipped and not charged unless includeNonWordPress is set to true
- Sites behind Cloudflare or aggressive bot protection may not be readable
- Up to 3 URLs per call; additional URLs are ignored
- Plugin detection may be incomplete if a site actively hides plugin paths
- Failed lookups are not charged but return an error row for that URL

## How this service works

Pay-per-call data and tools for AI agents, $0.002-0.01 per call in USDC via x402 (Base, Polygon or Solana), no account or API key; MAX tiers ($0.05-0.25) run deeper jobs. Agent toolkit: web search, search + read top pages, any page as clean markdown with a prompt-injection check, which-x402-API-to-call recommender, seller check. Data: Google Maps places with contacts, YouTube video data and transcripts, job listings (Indeed, LinkedIn, 13 boards), Google Ads Transparency, TikTok comments, Pinterest, Airbnb, Redfin, AliExpress, app stores, live sports, website and SEO checks, Shopify store tech stacks, and onchain token / address risk checks.

## Output

For each WordPress URL submitted, the agent receives a structured report including: all detected plugins with version numbers and their wordpress.org status (current, outdated, abandoned, or removed for security), the active theme and its status, the WordPress core version, WooCommerce detection with product/payment details if present, and hosting provider. Non-WordPress sites can optionally be included as unbilled rows.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "urls": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "maxItems": 3,
   "description": "Websites or domains, e.g. [\"woocommerce.com\", \"wpbeginner.com\"]. Non-WordPress sites are skipped for free."
  },
  "excludePlugins": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "maxItems": 3,
   "description": "e.g. your own plugin, to keep only prospects."
  },
  "onlyWithIssues": {
   "type": "boolean",
   "description": "Return only sites with at least one outdated plugin, a plugin removed from wordpress.org, or WordPress 2+ major releases behind. Built for maintenance and security agencies."
  },
  "requirePlugins": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "maxItems": 3,
   "description": "e.g. [\"woocommerce\"], [\"elementor\"], [\"Yoast SEO\", \"Rank Math\"]. Matches plugin names or slugs, case-insensitive."
  },
  "onlyWooCommerce": {
   "type": "boolean",
   "description": "Return only WordPress sites running WooCommerce."
  },
  "includeNonWordPress": {
   "type": "boolean",
   "description": "Adds an unbilled row for each site that isn't WordPress or couldn't be read."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "items": [
   {
    "url": "https://woocommerce.com",
    "input": "woocommerce.com",
    "theme": {
     "slug": "refer-wordpress",
     "parent": "woo"
    },
    "domain": "woocommerce.com",
    "plugins": [
     {
      "name": "WooCommerce",
      "slug": "woocommerce",
      "rating": 90,
      "source": "assets",
      "category": "ecommerce",
      "evidence": "asset path /wp-content/plugins/woocommerce/",
      "directory": "wordpress.org",
      "testedUpTo": "7.1.3",
      "lastUpdated": "2026-10-09",
      "latestVersion": "11.2.1",
      "activeInstalls": 7000000,
      "detectedVersion": null
     },
     {
      "name": "WooPayments",
      "slug": "woocommerce-payments",
      "rating": 68,
      "source": "assets",
      "category": "ecommerce",
      "evidence": "asset path /wp-content/plugins/woocommerce-payments/",
      "directory": "wordpress.org",
      "testedUpTo": "7.1.3",
      "lastUpdated": "2026-10-08",
      "latestVersion": "11.2.0",
      "activeInstalls": 800000,
      "detectedVersion": null
     },
     {
      "name": "Gravity Forms",
      "slug": null,
      "source": "rest-api",
      "category": "forms",
      "evidence": "REST namespace gf/v2",
      "detectedVersion": null
     },
     {
      "name": "Akismet",
      "slug": null,
      "source": "rest-api",
      "category": "security",
      "evidence": "REST namespace akismet/v1",
      "detectedVersion": null
     },
     {
      "name": "Yoast SEO",
      "slug": null,
      "source": "rest-api",
      "category": "seo",
      "evidence": "REST namespace yoast/v1",
      "detectedVersion": null
     },
     {
      "name": "Jetpack",
      "slug": null,
      "source": "rest-api",
      "category": "suite",
      "evidence": "REST namespace jetpack/v4",
      "detectedVersion": null
     }
    ],
    "siteName": "WooCommerce",
    "wordpress": {
     "latest": "7.1.3",
     "version": "7.1.3",
     "outdated": false,
     "releasesBehind": 0
    },
    "capturedAt": "2026-10-24T13:50:39+00:00",
    "isWordPress": true,
    "pluginsCount": 6,
    "auditComplete": true,
    "outdatedPlugins": [],
    "abandonedPlugins": [],
    "pluginsByCategory": {
     "seo": [
      "Yoast SEO"
     ],
     "forms": [
      "Gravity Forms"
     ],
     "suite": [
      "Jetpack"
     ],
     "security": [
      "Akismet"
     ],
     "ecommerce": [
      "WooCommerce",
      "WooPayments"
     ]
    }
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/wordpress-plugin-detector-f0fe4af6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-data.centorprat.workers.dev](https://www.zero.xyz/host/agent-data.centorprat.workers.dev/llms.txt)