All The-Goods Supplier Hub

All The-Goods Supplier Hub Core gives a WooCommerce administrator a supplier-independent connection and catalogue layer.

Core can:

• store multiple supplier connection profiles and encrypted credentials;

• connect to generic REST/JSON APIs using Basic, Bearer, API-key or token-exchange authentication;

• preview bounded responses and test authentication plus field mappings;

• normalize supplier product data into one internal model;

• browse live catalogues with server-side pagination;

• browse temporary catalogue snapshots without a permanent SQL catalogue index;

• enrich descriptive fields from an optional exact-match CSV content feed;

• record controlled diagnostic codes without raw credentials or response bodies;

• provide stable extension services for a separately installed add-on.

The administrator supplies endpoints, credentials and mappings from the chosen supplier’s documentation. The plugin does not run remote code. Core has no built-in supplier domains, fixed supplier list or required supplier account.

Optional connector extensions are installed separately; their service documentation and settings belong to that extension.

Core is permanently usable without a licence, product quota or supplier quota. It contains no licence calls, telemetry or private updater. It does not create WooCommerce products, write WooCommerce inventory, import product media or send customer orders.

Those functions are available in the separately distributed Supplier Hub Pro add-on.

Private feed storage must be blocked from public HTTP access by the hosting server. Apache and IIS rules are supplied. Hosts that ignore per-directory rules (including some managed static-file services) require an equivalent server-side deny rule for the plugin upload directory.

Directory listing being disabled is not sufficient.

External services

This plugin contacts supplier or feed endpoints only after a site administrator configures the relevant connection or enables its scheduled refresh. There is no registration requirement for Core.

Generic REST/JSON, CSV and XML connections use the HTTPS URL and credentials supplied by the administrator. Review the selected supplier’s own terms and privacy policy before enabling the connection.

Core includes no predefined third-party supplier service. The administrator chooses each endpoint and must review that service’s API documentation, terms of use and privacy policy before configuring credentials. Separately installed connector extensions must document their own external services and requests.

Connection tests, response previews, live catalogue browsing, exact-product requests and scheduled catalogue/feed refresh may send the configured credential, account identifier, pagination values, product identifiers and filters to that endpoint. Returned product data may be stored in the local WordPress database or a private uploads directory. The administrator must review the chosen supplier’s terms and privacy policy.

Core sends no telemetry, licence request, WooCommerce customer record, payment data or order address to All The-Goods.

Languages and user guide

English is the source language. org language packs. Existing independently installed WordPress language packs remain usable.

The included user guide is one document with a Dutch/English language choice, accessible from Supplier Hub. Core does not change the rest of the WordPress dashboard language.

Private feed storage

Temporary feed snapshots use the all-the-goods-supplier-hub directory under the runtime WordPress uploads directory. Existing atgsh-private storage is retained in place for compatibility. Apache and IIS access-denial files are created before use.

Nginx and other servers must be configured by the hosting administrator to deny HTTP access to this directory. Verify that direct requests are denied before using private feeds. The plugin does not edit hosting configuration.

Existing cache files and supplier settings are retained during upgrades.

Privacy

Core stores supplier configuration, encrypted credentials, normalized catalogue fields, optional private feed snapshots, task state and diagnostic codes on the WordPress site. Logs are retained for thirty days. Core does not process customer orders or customer addresses.

The plugin adds suggested text to the WordPress privacy-policy guide.