WordPress plugin

Read-only. It makes no outbound request at all until you connect the store, and it never reads a customer, an order's contents or a payment record.

Connecting

1. Install and activate the plugin.
2. Open Tools → Checkout Diagnostics.
3. Paste the service URL, store ID and secret you were issued, and press Connect.

The first snapshot goes out within fifteen minutes, and one every fifteen minutes after that. The secret is stored on your site with autoload off — an autoloaded option is read into memory on every page load of the site, including the front end — and it never leaves: it signs each snapshot rather than travelling with it.

Stopping

Press Disconnect. The schedule and the stored secret are removed together. Deactivating clears the schedule; deleting the plugin removes both.

What it reads

Order STATUS counts over time, order-note reason labels, gateway availability, webhook delivery counts, scheduled-action backlog, and which components changed. See Privacy for the exact list in both directions.

What it never reads

Customers, order contents, payment records, keys and webhook secrets. There is no code path in the plugin that touches them.

Source: packages/wp-diagnostic-plugin/ in the repository.