DevDome Affiliate Manager: Amazon Affiliate Plugin for Amazon Associates

DevDome Affiliate Manager is a WordPress Amazon Affiliate Plugin for site owners who want to earn commission from Amazon product links. Add your Amazon Associates tracking IDs and manage supported Amazon affiliate links across 22 marketplaces.

Tag existing links, turn selected keywords into affiliate links and track clicks by tag or keyword rule. Check product status, recover dead or unavailable product links and route visitors to regional Amazon stores. WooCommerce external products are supported too.

Local tagging, buttons, keyword linking, scanning, click counting and built-in bot detection work without an account or API key. Hosted status checks, replacement searches and geo routing require a connected DevDome account. These tools help Amazon affiliates maintain their links; they do not guarantee earnings.

Amazon Associates Tagging

Under Affiliate Tags, apply your Amazon tag sitewide or to selected posts, pages and post categories. Supported links are tagged when individual content pages display, without rewriting stored content.

SEO Attributes offers No Follow, Follow and Sponsored; No Follow and Sponsored default to on. Open in New Tab defaults to off. Click tracking honours it, falling back to the same tab if a new window is blocked.

Amazon Buy Button

Create an Amazon button with [devdaffi_button asin=”YOUR_ASIN”], using the product’s ten-character ASIN.

Under Button Link, Edit selects the marketplace; Regenerate resets it to amazon.com. Don’t add tag skips tagging and click interception for generated shortcode buttons.

Use Custom Link accepts a URL with an {ASIN} placeholder. For a fixed URL, use [devdaffi_button]. Non-Amazon destinations receive no affiliate tag.

Amazon Geo Localization

OneLink Alternative defaults to off. Regional routing needs a connected account and usable service response. Without a configured tag for the visitor’s local store, the original destination remains.

On /go, another owner’s tag is replaced with yours or removed. External services lists the visitor IP and other fields sent.

Amazon Link Checker and Link Radar

Scan Site For Amazon Links builds a local index; Scan Again refreshes it. Scans read published content and WooCommerce product URLs, indexing full Amazon product URLs containing an ASIN. Shortlinks and generated shortcode buttons are excluded. Supported ASIN paths on your own host can also be indexed from WooCommerce product URLs.

In Stock & 404 Monitor, Check Now checks scanned products in batches, showing progress and usage. Pause stops further batches, Resume continues and Cancel ends the run. An active batch may finish first.

The run can continue after you close the page through WP-Cron and a loopback request, with progress shown when you return. Those requests must work; account, quota or service errors can stop it.

Auto Re-Scan defaults to off. When enabled, it scans content at the Scan every interval and checks up to 20 indexed products hourly through DevDome. Local scans use no service allowance; status checks do.

Results include live, out of stock, dead and unknown. Failed service requests preserve existing statuses. The screen states 500 free checks and searches monthly per account and displays service-reported usage.

Dead Amazon Link Recovery

Out of Stock Redirect and 404 ASIN Redirect independently control recovery for stored statuses. Choose Best replacement product or Search page. Replacement mode searches at click time, falling back to Amazon search if no replacement returns. Disabled recovery leaves that destination unchanged.

For bulk replacement, enter your chosen New ASIN. Replace on N pages shows the affected page count, using singular wording for one page. It replaces matching ASINs in indexed content and product URLs, then checks the new ASIN. These content edits persist.

Affiliate Link Tracking

Supported Amazon clicks pass through /go. Affiliate Tags and Keyword Rules show Clicks and Unique. Affiliate click tracking totals belong to the affiliate ID or individual rule, not each product.

Unique counts one visitor per tag or rule per 30 minutes using a hash of IP address and browser user agent. Statistics do not store either raw value. Rate limits cap counted clicks from repeatedly requesting addresses. Blocked bots have one global counter.

Destinations are validated; supported shortlinks resolve before tagging. Shortlinks that cannot resolve to an allowed Amazon storefront are refused.

Keyword Auto-Linker and Blog Monetization

Keyword Rules supports affiliate marketing by linking selected words and phrases when content displays. It defaults to off.

Choose Exact Match or Broad Match, case sensitivity and link limits. Existing links are always excluded. Optional exclusions cover headings, code, blockquotes and the first paragraph. Add your own affiliate disclosure where you publish links.

WooCommerce Affiliate Product Links

WooCommerce Buttons defaults to off. Enable it to tag and count supported external product button clicks through /go.

Generated buttons retain the Amazon store named in the product link. Supported same-site links without a store use the Button Link marketplace. A configured custom button URL applies to matching buttons even with WooCommerce Buttons off. Rewriting happens at display time.

Click Protection

Block Bot Clicks defaults to on, stopping detected bots before redirects and click counting. It uses a built-in list, plus shared bot signatures and Spamhaus DROP ranges when cached locally. This build downloads no shared feeds.

Block outdated browsers defaults to off and requires Block Bot Clicks. It treats desktop Chrome, Chromium-based Edge and Firefox below version 125 as bots, except Chrome and Edge 109 and Firefox 115 ESR. Phones and tablets are excluded.

Bots Blocked is a global counter subject to click rate limits; Reset Count clears it. Redirect Method offers JavaScript + 302 (Recommended), JavaScript Only or 302 Redirect Only.

Amazon Mobile App Opener

Mobile App defaults to off. Android’s Force Amazon App (Intent) attempts to open the app, falling back to the browser. Web Only (Recommended) uses the web destination.

The optional iOS setting provides an Open in Safari link in detected in-app browsers. It opens a new browsing context but cannot guarantee Safari.

AI and Agent Support

On WordPress 6.9+, 16 WordPress Abilities let compatible agents work with settings, tags, keyword rules, scans, statuses, quota, ASIN replacement and click counters when your site exposes them. Administrator permissions are required. Agent status checks cover a bounded batch, not the screen’s complete Check Now run.

Confirmation is required for ASIN replacement, tag or rule removal, counter resets, remote status checks, enabling geo routing or scheduled checks, disabling bot blocking, and saving lists that remove tags or rules.

Output excludes account email addresses, the site token and server paths. Remote status and replacement checks use the disclosed services.

Independent Amazon Associates Tool

Use this affiliate link manager for Amazon affiliation and link maintenance.

DevDome Affiliate Manager is independent. Amazon, Amazon Associates and OneLink are trademarks of Amazon.com, Inc. or its affiliates. This plugin is not endorsed by, sponsored by or otherwise affiliated with Amazon.

External services

DevDome provides the services below. Terms: https://devdome.com/terms-of-service Privacy policy: https://devdome.com/privacy-policy

Plugin catalog: https://devdome.com/wp-plugins/catalog.json. After account connection, the shared DevDome Tools dashboard fetches plugin names, descriptions, logos and links. The request identifies the bundled core version through its user agent, with no site or visitor fields. Successful results are cached for 12 hours; failures for one hour. Before connection, the dashboard uses its bundled catalog.

Link Radar status checks, https://api.devdome.com/amazon-404-oos-checker

/check-batch receives a POST containing ASINs, their Amazon domains, this site’s domain and secret site token. Calls occur during Check Now, status rechecks, checks following bulk replacement, confirmed agent checks and hourly checks while Auto Re-Scan is enabled. Hourly checks process up to 20 products. An empty index gives them nothing to check.

/search receives a GET containing a keyword, Amazon domain, site domain and site token. The keyword contains up to six words derived from the linking post’s title or product metadata. It runs at click time when recovery is enabled for the stored status and Best replacement product is selected. Results are cached for one hour, or ten minutes when no replacement is returned. No visitor IP or browser data is included in these two service payloads.

/usage receives a GET containing the site domain and site token when the screen or an agent requests account usage. The caller must have a connected account state or a recorded connection attempt. The screen also updates its meter from batch responses.

Checks and searches require a connected account and consume its allowance. The screen states a free allowance of 500 checks and searches per month. The service supplies the current plan, limit and usage. Failed or refused checks leave stored statuses unchanged.

Geo-localization, https://api.devdome.com/geo-resolve

The actual endpoint is https://api.devdome.com/geo-resolve/resolve. When OneLink Alternative is enabled, eligible /go clicks send a JSON POST containing the visitor’s IP, destination ASIN and Amazon domain, domains with enabled regional tags, site domain and site token.

The service uses these fields to choose a regional destination. No request is made without a visitor IP or configured regional coverage. An unusable response leaves the original destination in place. The plugin subsequently replaces or removes tags that are not yours.

DevDome account, https://api.devdome.com/plugin/account, /plugin/disconnect and https://analytics.devdome.com/api/plugin/connect/*

The shared account library makes no account-status request before a connection action has been recorded.

• https://api.devdome.com/plugin/account: POST with the site domain and the site token in an Authorization header. It verifies account status after connection actions and on later status reads. Successful responses are cached for 15 minutes. The response includes account identity, email and plan.
• https://analytics.devdome.com/api/plugin/connect/start: POST when you press Connect. It sends the site domain as site_id and site_domain, the site token and the wp-admin return URL.
• https://analytics.devdome.com/api/plugin/connect/claim: POST when completing the connection. It sends site_id, site_domain, site_token, request_token and the handshake nonce.
• https://api.devdome.com/plugin/disconnect: POST when you press Disconnect, carrying the site domain and authenticated site token.

The browser visits https://devdome.com/connect/ to authorize the connection. Its URL carries an opaque request handle, not the Account ID or site token.

Connecting through the disclosed DevDome Tools card also authorizes an inventory in recurring account-status requests: active DevDome plugin slugs and versions, plus DevDome library, WordPress and PHP versions. It excludes other plugins, users, email addresses, content and visitors. Existing connections and connection buttons without this disclosure do not grant that inventory permission. Disconnecting stops inventory sharing.

Amazon

At click time, /go resolves Amazon URLs server-side, including amzn.to, a.co, amzn.eu and amzn.asia. It requests HEAD first and retries with GET if HEAD fails, returns below 200, or returns 405 or 501. It follows only allowed Amazon hosts, with a seven-request-hop limit. Successful resolution is cached for 12 hours.

Requests contain the destination URL and a generic plugin user agent, not the visitor’s IP or browser user agent. The visitor’s browser separately contacts Amazon when it follows the resulting link.

This service is provided by Amazon.com, Inc.: Conditions of Use, Privacy Notice.

No error reports

This plugin sends no error reports. The “Report a bug” link on its screen opens the bug form on devdome.com in your browser; the plugin itself sends nothing.

Not contacted on this WordPress.org build

This build does not fetch https://api.devdome.com/bot-protection/list, /bot-protection/asns or /bot-protection/drop, and does not schedule feed downloads. Local matching can still use shared data already cached on the site.

It does not contact https://api.devdome.com/plugin-updates/. The self-hosted updater and installer are excluded. Updates come from WordPress.org. Dashboard installation of listed WordPress.org plugins uses WordPress’s plugin-information API and validated packages from downloads.wordpress.org, only after an authorized installation request.

Never sent, in any request

The plugin’s generated service payloads do not include passwords, password hashes, visitor form input, visitor names or visitor email addresses.

The scanner runs locally. It does not upload posts, pages or comments. Status checks send extracted ASINs and domains. The content-derived exception is the replacement keyword described above, which contains up to six words from a title or product metadata.

Source & build

The React admin source is included in admin-ui-src/src/. Vite builds assets/admin/index.js and its stylesheet with minification disabled in the build configuration.

To rebuild, run cd admin-ui-src, then npm install and npm run build. Dependency versions are recorded in admin-ui-src/package-lock.json: React and ReactDOM (MIT), and Lucide React (ISC). Bundled upstream production dependencies can contain compressed code.