Manifest

The WordPress plugin

The WooCommerce installer for Manifest. Download the plugin, paste your store key, and keep it out of optimizers and optional-consent lists.

Download the pluginWordPress.orgWhat Manifest is

WordPress 6.4 or later, PHP 8.1 or later, GPLv2 or later. A key is issued only after Manifest is on a verified store. Priced per store — amounts are on /pricing.

What it does

Puts the Manifest tag on your WordPress store as a file from your own site, and sends a heartbeat so Tagnovo can see which scripts ran on payment pages. It never reads form fields, card numbers, names or addresses. Defaults cover /checkout*,/cart* and /order-pay*.

Install

  1. Get a store key. Add Manifest on a verified store. Copy the key from Tagnovo → Manifest → Install. The key starts with pk_live_.
  2. Install the plugin. Download the plugin zip, then in WordPress open Plugins → Add New → Upload Plugin. Or search Tagnovo Manifest in the WordPress plugin directory. Activate Tagnovo Manifest.
  3. Paste the key. Settings → Tagnovo Manifest. Paste the key. Keep the payment-path globs, or edit them. Save.
  4. Refresh the cached script. Click Refresh cached script so the tag is served from your site.
  5. Exclude optimizers. Exclude the tagnovo-manifest handle from WP Rocket, LiteSpeed Cache, W3 Total Cache, and Autoptimize.
  6. Mark it essential. In Complianz, CookieYes, or similar, mark the tag essential. A banner that blocks essentials silences the heartbeat.

The dashboard waits for the first beacon, then learns for fourteen days before absence alerts. A rotated key still sitting in a page cache looks like the old install.

When it will not see

  • Tag Manager only — Brave and many Shields block the container.
  • A head snippet with no plugin — treated as a cross-site tracker.
  • Shopify hosted checkout, or scripts inside a payment iframe.
  • A content-security-policy that omits the script or the beacon host.
  • A consent banner that blocks essentials.
  • No payment-page patterns (the plugin ships the three Woo globs above).
  • An unverified store — the dashboard will not issue a key.
  • A preview origin that is not allowlisted.

Questions people actually ask

Does the plugin read card numbers or form fields?

No. It never reads the payment form, card numbers, names or addresses. It reports which scripts ran on the page.

Can I install it only through Google Tag Manager?

No. Tag Manager is one of the things Manifest watches. If the container is blocked, the monitor goes quiet. GTM may be a duplicate; it is not the install.

What do I exclude in a caching plugin?

The tagnovo-manifest handle. Purge the page cache after a key rotate.

Why does a consent plugin stop it?

Many banners treat any third-party file as optional. Mark Tagnovo essential so the banner does not silence it.

Privacy of the heartbeat is on the privacy notice. Why the tag cannot live only in Tag Manager is in the terms and onInstall the tag once you have a store.