Subscription-Gated AI Agent System

This repository contains the source code for a serverless architecture that monetizes MindStudio AI Agents using WordPress and Lemon Squeezy.

It allows users to sign up for free on a WordPress site, but requires an active Lemon Squeezy subscription to access the AI interface. Authentication and logic are handled securely via Pipedream, ensuring no API keys are exposed to the client.

🏗 Architecture

1. Frontend (WordPress): Checks the current logged-in user and sends their email to the backend via a secure POST request.
2. Middleware (Pipedream):
   • Validates the request origin (CORS).
   • Queries the Lemon Squeezy API to verify if the user has an active or on_trial subscription.
   • If active: Requests a Signed URL from MindStudio.
   • If inactive: Returns a 403 status.
3. User Interface:
   • Success: Renders the AI Agent inside an <iframe>.
   • Failure: Displays a "Subscription Required" paywall with a dynamic checkout link.

---

📂 Repository Structure

.
├── backend/
│   └── pipedream-workflow.js   # Node.js code for the Pipedream component
├── frontend/
│   └── wordpress-snippet.php   # PHP/JS code for WPCode (Insert Headers & Footers)
└── README.md

---

🚀 Prerequisites

• WordPress Site: With the Ultimate Member plugin (for user auth) and WPCode (to insert the snippet).
• Pipedream Account: To host the backend logic.
• Lemon Squeezy: A store with a product created and an API Key (Settings > API).
• MindStudio: A published AI Agent, its Agent ID, and an API Key.

---

🛠️ Setup Guide

1. Backend Configuration (Pipedream)

1. Create a new Workflow in Pipedream.
2. Add a Trigger: Select HTTP / Webhook.
   • Important: In the trigger settings, change HTTP Response to "Return a custom response from your workflow".
3. Add a Step: Select Node.js > Run Node Code.
4. Copy the code from backend/pipedream-workflow.js and paste it into the step.
5. Configure the Props (Variables) in the Pipedream UI:
   • lsApiKey: Your Lemon Squeezy API Key.
   • mindstudioApiKey: Your MindStudio API Key.
   • defaultAgentId: (Optional) Your main Agent ID.
6. Security (CORS): Inside the code, locate the headers object and change Access-Control-Allow-Origin from * to your actual domain (e.g., https://your-site.com) for production.
7. Deploy the workflow and copy the endpoint URL.

2. Frontend Configuration (WordPress)

1. Install the WPCode plugin in WordPress.
2. Go to Code Snippets > + Add Snippet > PHP Snippet.
3. Copy the code from frontend/wordpress-snippet.php and paste it into the editor.
4. Update the configuration variables at the top of the PHP file:

   $pipedream_endpoint = "YOUR_PIPEDREAM_URL_HERE";
   $lemon_checkout_url = "YOUR_LEMON_SQUEEZY_PRODUCT_URL";
   $agent_ID = "YOUR_MINDSTUDIO_AGENT_ID";

5. Set the Insertion Method to Shortcode.
6. Save and Activate the snippet.
7. Copy the shortcode (e.g., [wpcode id="123"]).
8. Paste the shortcode into the WordPress Page where you want the agent to appear.

3. Lemon Squeezy Redirect

1. Go to your Product settings in Lemon Squeezy.
2. Enable Redirect after purchase.
3. Set the URL to your WordPress Agent page (e.g., https://yoursite.com/agent).

---

📝 Usage

1. A user logs into your WordPress site.
2. They visit the Agent page.
   • Scenario A (No Subscription): The system detects no active plan. A "Subscription Required" message appears. The user clicks "Activate Subscription," which takes them to checkout with their email pre-filled.
   • Scenario B (Subscribed): The system validates the subscription via Pipedream. The AI Agent loads immediately, preserving the user's chat history.

---

🔧 Troubleshooting

• CORS Error in Console: Ensure you selected "Return a custom response" in the Pipedream Trigger settings.
• SyntaxError (Unexpected token <): This usually means Pipedream is returning the default HTML success page instead of JSON. Check the trigger settings again.
• 403 Forbidden: The integration is working, but the user does not have an active subscription in Lemon Squeezy associated with their WordPress email.

---

🔒 Security Note

• Never paste your API Keys into the frontend/wordpress-snippet.php file.
• API Keys should only exist in the Pipedream environment variables (Props).
• The signed-url generated is temporary (1 hour) and specific to the logged-in user.