Quick Answer: In September 2026, Amazon and Shopify gave opposite answers to whether AI agents should be allowed to buy on a shopper's behalf. Amazon started blocking Meta's Muse agent on September 20, citing trust, identification, and privacy concerns. On September 28, Shopify extended WebMCP to checkout, so an agent working in a shopper's browser can now fill in the checkout and place the order once the shopper approves it, across all eligible Shopify merchants. You stay the merchant of record, and every agent purchase is a normal Shopify order. What matters more now is your product data, your checkout setup, and your tracking.

Key Takeaways

• Amazon is blocking third-party AI shopping agents. Shopify is opening checkout to them, with the shopper approving every order.
• Shopify's WebMCP checkout lets browser agents read, update, and place orders through structured tools instead of clicking through pages built for humans.
• In Shopify's own test, WebMCP checkout was 2.7x as fast as browser automation, 58% cheaper to run, and succeeded on 60 of 60 attempts.
• Agents can select a saved Shop Pay card but can't enter a new one, and they can't change what's in the cart.
• Your product data, checkout setup, and tracking decide how well agent orders work for your store.

In September, the biggest names in ecommerce gave opposite answers to one question: should an AI agent be allowed to buy something on your customer's behalf?

Amazon said no. On September 20 it started blocking Meta's Muse agent from its site, less than two weeks after Meta launched it. Shoppers using agents have since reported blocks on other brand sites too, Adidas among them.

Shopify said yes. On September 28 it extended WebMCP to checkout, so an agent running in a shopper's browser can now fill in the checkout and place the order once the shopper approves it. It's rolling out to all eligible Shopify merchants, which means this decision was largely made for your store.

Here's what actually changed, why Amazon went the other way, and what I'd check before Black Friday.

What did Shopify actually ship?

Shopify already let agents search your catalog and build a cart through WebMCP, a proposed web standard for agents that work inside the shopper's browser. The September update adds checkout through three tools:

• get_checkout reads the checkout as it stands, including line items, totals, delivery options, and anything missing or blocking, and the order receipt once the order is placed.
• update_checkout changes contact details, the shipping address, the delivery option, discount codes, and the payment selection, then returns the recalculated checkout.
• complete_checkout places the order, after the shopper confirms it.

A few details in Shopify's developer docs matter more than the headline. The agent works on the same checkout page the shopper is looking at, in the same tab. It can't enter a new card number, only select a saved Shop Pay card, and the shopper picks any other payment method on the page. It can't change what's in the cart either. Shopify also tells agent builders to show the shopper the order and total and get their permission before placing it, and to ask again if the total changes.

Updates work by describing the whole desired state. When a shopper changes their address, the agent sends the new address along with everything else it wants to keep, and gets back the full recalculated checkout, including new delivery options, split shipping, and any change in discount eligibility. That's how it avoids missing a step.

Merchant customizations still apply. Checkout extensions, custom business rules, 3D Secure challenges, and Shop Pay verification codes all work as usual. When one of them needs the shopper, the agent hands control back. We go deeper on the mechanics in "AI Agents Can Now Check Out on Your Shopify Store."

How much faster is WebMCP checkout?

Gil Greenberg, the Shopify product manager behind the launch, published a benchmark comparing WebMCP checkout with an agent clicking through the page the usual way. Shopify ran 10 checkout tasks, like updating an address, applying and removing a discount, and entering an invalid discount, across 2 test shops, 6 times each with each approach.

It's Shopify's own test on its own test shops, so treat it as a direction, not a guarantee. But the direction is clear: structured checkout is faster, cheaper, and more reliable for agents than scraping the page.

How is WebMCP different from Shopify's Checkout MCP?

This sits next to Shopify's existing Checkout MCP server, which is for agents running on their own servers. Both are built on Shopify's Universal Commerce Protocol (UCP), so the checkout looks the same to the agent either way. The difference is where the agent lives:

Shopify's own advice to agent builders: if your agent can work without a browser, go server to server through Checkout MCP. If it already works in the shopper's browser, use WebMCP instead of clicking through pages built for humans.

Why did Amazon and Shopify go opposite ways?

Amazon's stated reasons were about trust. It said Meta never told it Muse would shop on Amazon, that the agent didn't identify itself, and that handling customers' login credentials raised privacy and security concerns. Meta disputes that. Amazon also runs its own agents, Alexa for Shopping and Buy for Me, and sued Perplexity over its Comet agent last November. My read is that Amazon doesn't want someone else's agent standing between it and its shoppers.

Shopify is in a different position because it isn't the store. Your store is. More agents that can buy means more orders flowing through Shopify merchants, as long as those agents behave. That's why the WebMCP rules focus on identity and consent: agents sign their requests, and the shopper approves every order. Muse and Instinct already have direct partnerships with Shopify for agentic commerce, and in September Meta was also added as an AI sales channel for Shopify merchants, where you choose whether to allow direct checkout through Meta.

Not every block is a policy decision, though. Walmart is a Muse partner, yet shoppers still reported Muse failing on Walmart.com because of a click-to-prove-you're-human check. Adidas hasn't commented on the reports about its site. A lot of what agents run into is ordinary anti-bot protection that was never built to tell a shopper's agent apart from a scraper.

What does this mean for your store?

You stay the merchant of record. Every agent purchase is a normal Shopify order that you fulfill, refund, and support. What changes is who fills in the forms, and three parts of your store now matter more than they used to.

Your product data. Agents choose products from what your catalog tells them through UCP: titles, variants, prices, stock, and attributes. Thin titles or missing attributes give the agent less to go on, and it will pick a product it understands better. We covered how to get products in front of AI agents in "How to Show Your Shopify Products in AI Agents like ChatGPT, Perplexity and Gemini (Using Google UCP)."

Your checkout setup. The WebMCP tools aren't available on every checkout. Shopify doesn't register them on the older three-page checkout unless the shopper pays with Shop Pay, or on B2B checkouts and draft orders. Shop Pay matters in general, because an agent can select a saved Shop Pay card but can't enter a new one. Anything a checkout app asks for, like a gift message or a custom field, the shopper still handles on the page.

Your tracking. Most agent purchases still end on your own checkout. With WebMCP the agent works in the shopper's tab, and Shopify's recommended server-side flow often sends the shopper to your checkout to pay. Either way the order lands in Shopify like any other, so server-side tracking that sends purchases from Shopify's order data, which is how Aimerce sends them to Meta and Google, still picks it up. Because WebMCP runs in the shopper's own browser session, cookies and click IDs from an earlier ad visit should still be there.

Source attribution is less settled. WebMCP checkout ignores the attribution field agents can send. Checkout links that agents build can carry marketing attribution, but only if the agent adds it. And purchases completed on Meta's own platforms through its sales channel never touch your site. Expect agent-driven orders to show up unevenly in your reports for a while.

What should you check before Black Friday?

None of this needs a big project. Most of it is a half-hour review.

1. Confirm you're on one-page checkout. On the three-page checkout, agents can only place the order when the shopper pays with Shop Pay.
2. Keep Shop Pay on. It's the one payment method an agent can select for the shopper without them typing anything.
3. Read your top products the way an agent would. If size, material, fit, or compatibility only appears in images, add it to the title, variants, or product attributes.
4. Test your bot protection. If you run a bot-blocking or captcha app, make sure it isn't turning away verified agents the way Walmart's human check tripped up Muse.
5. Watch your sales channels. New AI channels like Meta will show up there first. Don't panic if a handful of orders arrive with no clear source.

If you're on Aimerce, agent orders reach Meta and Google server-side like any other Shopify order. If you'd rather have a new sales channel handled differently in your Purchase events, tell us and we'll set it up for your store.

My view: for most Shopify brands, being reachable by agents is upside, not risk. Amazon can afford to turn shoppers away because it owns the destination. Most of us can't, so I'd make sure your store is easy for an agent to buy from instead.

FAQ

Why is Amazon blocking AI shopping agents? Amazon started blocking Meta's Muse agent on September 20, 2026, saying Meta didn't tell it Muse would shop on Amazon, the agent didn't identify itself, and handling customers' login credentials raised privacy and security concerns. Meta disputes that. Amazon also runs its own shopping agents.

Can AI agents check out on Shopify stores? Yes. Since September 28, 2026, browser-based AI agents can use Shopify's WebMCP checkout tools to read the checkout, update it, and place the order after the shopper approves it. It's rolling out to all eligible Shopify merchants.

What are Shopify's WebMCP checkout tools? Three tools: get_checkout reads the checkout, update_checkout changes contact details, address, delivery, discounts, and payment selection, and complete_checkout places the order after the shopper confirms it.

How much faster is WebMCP checkout than browser automation? In Shopify's own benchmark of 10 checkout tasks across 2 test shops, WebMCP took 10.3 seconds per attempt versus 27.4 seconds, cost 58% less, and succeeded on 60 of 60 attempts versus 56 of 60.

Can an AI agent pay with any card on Shopify? No. With WebMCP, an agent can select a saved Shop Pay card but can't enter a new card number. Any other payment method, the shopper chooses on the page.

Who is the merchant of record for AI agent orders? You are. Every agent purchase is a normal Shopify order that you fulfill, refund, and support.

Sources

[1] Bloomberg, "Amazon blocks Meta's Muse AI agent from its retail site,"

[2] Gil Greenberg on X, "WebMCP support for checkout, including Shop Pay,"

[3] Shopify Developers, "WebMCP,"

[4] Shopify, "Universal Commerce Protocol,"

[5] The Wall Street Journal, "Shopify to use Meta's Muse for agentic checkout,"

[6] Kessler on X, "AI agent blocked on Adidas,"

[7] Noah Shinn on X, "Instinct partners with Shopify,"

Related reading

• AI Agents Can Now Check Out on Your Shopify Store
• Shopify Agentic Checkouts Don't Fire Your Tracking Pixel
• How to Show Your Shopify Products in AI Agents like ChatGPT, Perplexity and Gemini (Using Google UCP)
• How UCP's Attribution Field Reconnects Agentic Commerce to Your Pixel
• Google Universal Cart: What Shopify Brands Need to Track