Documentation · Version 1.0

Store API protection

How exact Store API checkout routes receive the same local decision.

Free version 1.0.0 is available from the official WordPress.org Plugin Directory. Premium plans and downloads are available from the pricing page.

Exact route matching

Checkout Firewall evaluates exact supported Store API checkout routes, including the protected existing-order route. It does not broadly intercept every Store API or REST request.

Response behavior

  • Challenge required returns a recoverable conflict
  • Temporary throttle returns HTTP 429
  • A terminal block returns HTTP 403
  • A checkout draft may exist, but intervention occurs before gateway payment and must not create a second logical order

Related resources

How the decision flow works · Compatibility matrix · Support · Public source

Version 1.0.0 · Available on WordPress.org

Put a control between checkout abuse and your payment gateway.

Install the complete Free edition from the official WordPress.org Plugin Directory. New installations begin safely in Observe Mode.