WHMCS Agent: AI Monitoring and Support Agent for WHMCS

WHMCS Agent watches one or many WHMCS installs for you: it runs a full check every day, applies the fixes you allow, drafts replies to support tickets and asks before anything risky. I built it for the hosting companies I look after, and I use it on WHMCS 8.13 and 9.1 installs. The screenshots show it running, with the company names and addresses replaced.

What does it check?

• WHMCS health: the cron heartbeat and tasks stuck "in progress", the license, maintenance mode, updates that never finished, module and payment gateway errors, failed emails, and orders and invoices that are waiting too long.
• Security: new admin accounts, admins without two-factor sign-in, the permissions of configuration.php, a fingerprint of every file compared each day, a malware scan and Imunify360 detections.
• The server, over SSH: services, disk, memory, load, clock drift and waiting security updates.
• Uptime: the site and the login page every 15 minutes.

What can it fix, and who decides?

Every fix has a policy you set on the Automations page: run on its own, ask and approve itself after 1, 6 or 24 hours if nobody answers, or always ask. Clearing stuck cron tasks can run on its own; switching maintenance mode off always asks. Anything the AI suggests is locked to "always ask". Before a fix runs, the agent checks the problem is still there; afterwards it checks the result and undoes the change if the check fails. A fix you deny is not suggested again for 7 days. It never touches payments, credit or refunds, and every approval is written to an audit log.

How does it help with support tickets?

It looks at new tickets every few minutes. For each one the AI reads the customer's services, invoices and the relevant logs, then drafts a reply with a category, the customer's mood and how sure it is. You approve, edit or reject the draft. Billing, cancellation and abuse tickets always wait for a person.

How does it connect, and what do you need?

Over SSH it pipes a small read-only probe through PHP, so nothing is written to the server. Over FTPS it uploads a temporary probe protected by a token and checks that it was deleted afterwards. Database backups are available per client, off by default, and each backup zip is verified.

It runs on a Mac, a Linux server or in Docker, with a web dashboard that listens on your own machine and needs a password when opened from anywhere else. The AI can be Claude Code, Codex or Gemini on your own plan, or any OpenAI-compatible API key. Alerts and approvals can go to Telegram (with Approve and Deny buttons), WhatsApp, email, SMS, Slack, Discord or a webhook.

Disclosure: WHMCS Agent is my own product. I install it and connect your first WHMCS installs with you, and it includes a year of updates and support. Related service: WHMCS support and maintenance.