AI Insights is off by default. To switch it on you provide your own API key for one of three providers. You are billed by that provider directly — there is no Zorem-hosted AI service and no additional charge from us.
Go to WooCommerce → Settings → Subscription Analytics, in the AI Insights card.
You need the manage_woocommerce capability — an Administrator or Shop manager — to see this screen at all.
Setup steps
- Go to WooCommerce → Settings → Subscription Analytics.
- Tick Enable AI Insights.
- Choose your AI provider — Claude, ChatGPT or Gemini. Only the selected provider’s fields are shown.
- Paste your API key for that provider (see the table below for where to get one).
- Optionally set a model. Leave it blank to use the provider’s default.
- Click Test connection to confirm the key works.
- Click Save changes.
Providers and where to get a key
| Provider | Get an API key | Default model |
|---|---|---|
| Claude (Anthropic) | console.anthropic.com/settings/keys | claude-sonnet-5 |
| ChatGPT (OpenAI) | platform.openai.com/api-keys | gpt-4o-mini |
| Gemini (Google) | aistudio.google.com/app/apikey | gemini-2.5-flash |
Choosing a model
The Model field is free text, so you can use any model your account can access — including one released after this plugin version. Leave it blank and the provider’s default is used.
Smaller, faster models are a good fit here: the plugin sends a compact set of totals rather than large documents, so the cheaper models generally produce good results at a fraction of the cost. The defaults above are deliberately mid-range or small for that reason.
Because the field is free text, a model name that your account cannot access — or one that has been retired by the provider — is only discovered when a request is made. Test connection after changing it.
Testing the connection
Test connection sends one very short prompt to the selected provider and reports whether the key was accepted — confirming in a single step that the key is valid, the model name is recognised, and your server can reach the provider. It costs a fraction of a cent.
| Message | What it means | What to do |
|---|---|---|
| Connected. …replied in N ms using N tokens. | The key and model work. | Nothing — you are ready to use the AI panels. |
| Enter an API key first. | No key is saved for the selected provider. | Paste a key into the field, then test again. |
| An authentication or permission error | The key is wrong, revoked, or the account has no credit or quota left. | Re-copy the key from your provider’s dashboard and check billing is set up on that account. |
| A model error | The model name is not recognised, or your account cannot access it. | Clear the Model field to fall back to the provider’s default. |
| A connection or cURL error, or a timeout | Your server could not reach the provider at all. | See the next section — this is the most common failure on managed hosting. |
If your server cannot reach the provider
- Outbound HTTP is blocked by the host. Some managed WordPress hosts deny outbound connections by default. Ask them to allow
api.anthropic.com,api.openai.comorgenerativelanguage.googleapis.com, depending on your provider. WP_HTTP_BLOCK_EXTERNALis set inwp-config.php. If so, add your provider’s host toWP_ACCESSIBLE_HOSTS.- A security plugin or firewall is intercepting outbound requests. Temporarily disable it to confirm, then allowlist the host.
- Check WooCommerce → Status → Logs, source
subscription-analytics— a failed request is recorded there with the underlying error.
How your key is stored
Your API key is encrypted before it is written to your own database, and is never sent to Zorem. After saving, the settings screen shows only a masked hint so you can confirm which key is in place. It is never written to the log.
To replace a key, paste the new one over the field and save — leaving the field blank keeps the existing key. To remove one entirely, tick Remove the saved key and save.
wp-config.php. Rotating them — which some security plugins do, and which can happen during a migration — makes the stored key impossible to decrypt on this site. Nothing is lost at your provider; paste the key in again and save.