Skip to content
PepBuddy
Apply
MenuClose

Connect your store

Upload one plugin, click Connect to PepBuddy, approve. About 10 minutes, read-only, and no passwords or API keys.

Download PepBuddy Connector from your PepBuddy workspace under Settings, then Store connection.

Install in four steps

  1. NextStep 01

    Upload the plugin

    In WordPress go to Plugins → Add New → Upload Plugin.

  2. ThenStep 02

    Install and activate

    Choose the zip you downloaded, click Install Now, then Activate.

  3. ThenStep 03

    Click Connect to PepBuddy

    Activating does not connect your store yet. Open WooCommerce → PepBuddy and click the Connect to PepBuddy button.

  4. FinallyStep 04

    Approve

    You're sent to PepBuddy. Check that the store address is yours and click Approve and connect.

WordPress: Plugins > Add New > Upload Plugin
Then: WooCommerce > PepBuddy > Connect to PepBuddy
On PepBuddy: Approve and connect

Using a caching or security plugin? Allow, and do not cache, the path /wp-json/pepbuddy/.

Troubleshooting

A firewall is blocking PepBuddy

Your store answers PepBuddy with a block page or a challenge instead of data.

  • Cloudflare: add a WAF custom rule that skips security checks when the URI path starts with /wp-json/pepbuddy/.
  • Wordfence: allowlist the path /wp-json/pepbuddy/ (Firewall → All Firewall Options → Allowlisted URLs), or switch to learning mode while you connect.
  • Sucuri and other site firewalls: allowlist the path /wp-json/pepbuddy/.
  • Managed hosts (SiteGround, Cloudways, WP Engine and others): ask support to allow REST API requests to /wp-json/pepbuddy/.

Send this to your host

Please allow REST API requests to the path /wp-json/pepbuddy/ on our site. Our store uses the PepBuddy Connector plugin, which signs every request; the firewall is currently blocking or challenging them.
The WordPress REST API is off

Your store answers 404 for /wp-json/, or a plugin disables the REST API.

  • In WordPress go to Settings → Permalinks and click Save Changes (this repairs the REST routes).
  • If a security plugin disables the REST API, allow it for the /wp-json/pepbuddy/ routes.
A cache is answering for your store

PepBuddy receives old copies of responses, so signatures and timestamps do not match.

  • Exclude /wp-json/pepbuddy/ from your page cache.
  • LiteSpeed Cache, WP Rocket, W3 Total Cache: add /wp-json/pepbuddy/ to the never-cache list.
  • Cloudflare APO or Cache Rules: bypass the cache for paths starting with /wp-json/pepbuddy/.
  • Host-level caches (Varnish): ask your host to bypass /wp-json/pepbuddy/.

Send this to your host

Please exclude the path /wp-json/pepbuddy/ from all page and edge caching on our site.
Request headers are being removed

PepBuddy's signed headers do not reach your store.

  • Turn off security rules that strip unknown request headers for /wp-json/pepbuddy/.
  • If your host strips headers, ask them to pass through headers starting with X-PB- for that path.

Send this to your host

Please pass through request headers starting with X-PB- for the path /wp-json/pepbuddy/ on our site.
Show 7 more
Updates are arriving slowly No action needed

Your site's background tasks (WP-Cron) are off or blocked, so PepBuddy pulls changes instead of receiving them.

  • No action is required: pull mode keeps your data up to date, a little more slowly.
  • Optional: set up a real server cron that calls wp-cron.php every minute, or turn on your host's cron option.
The store address does not match

WordPress reports a different address than the one PepBuddy expects (for example www versus no www, or a staging site).

  • Check Settings → General in WordPress: the WordPress Address and Site Address must both be your live store address.
  • If your store moved, change the store address in this step, then click Connect to PepBuddy again.
Your store's security certificate is not valid

The HTTPS certificate is expired, self-signed or for another name.

  • Renew or fix the certificate with your host (most hosts offer free Let's Encrypt certificates).
  • PepBuddy never skips certificate checks, so the connection waits until the certificate is valid.
Your server's clock is wrong

Your store's clock differs from real time by more than a few minutes.

  • Ask your host to turn on time synchronisation (NTP) for your server.

Send this to your host

Our server clock is several minutes off. Please enable NTP time synchronisation.
The plugin needs an update

Your store runs a version of the plugin that PepBuddy no longer accepts.

  • Download the latest zip on this page.
  • In WordPress go to Plugins → Add New → Upload Plugin and upload it again: it replaces the old version in place.
WooCommerce is not active

The plugin is installed but WooCommerce is deactivated.

  • In WordPress go to Plugins and activate WooCommerce, then click Connect to PepBuddy again.
The connection request expired

The approval took longer than 15 minutes.

  • In WordPress open WooCommerce → PepBuddy and click Connect to PepBuddy again, then approve right away.