Amazon Just Locked Meta's AI Agent Out. Every Online Shop Now Has the Same Decision to Make.

On the night of Sunday, September 20, people who asked Meta's new AI agent, Muse, to buy something on Amazon.com stopped getting a shopping cart. They got a warning instead: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed."

Amazon says it asked Meta first to leave Amazon out of Muse voluntarily. Meta did not, so Amazon blocked it. Muse had been on sale for less than two weeks. (Most reports date the block to Sunday night; a few give September 21, the day the news broke.)

This is not a fight between two giants that small businesses can watch from the sidelines. It is the first public test of a question every online shop will face: when a customer sends a piece of software to shop for them, do you let it in, and on what terms?

What Amazon says

Amazon's objections, as reported by GeekWire, CNN, Forbes and others, come down to four points:

• No notice, no choice. Meta did not tell Amazon that Muse would shop its store, and Amazon says it was given no say in whether it should be available through Muse.
• The agent does not identify itself. When Muse browses Amazon, it does not announce that it is an automated agent rather than a person.
• Customer credentials. Amazon says the agent appears to capture and store customers' login details, which it argues creates privacy and security risks.
• The shopping experience. CNN reports Amazon also said agents do not offer the personalised recommendations its own store does.

An Amazon spokesperson put the position this way: "third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate."

Amazon's rules are written down. Its Conditions of Use now include a section on agents, defined as software that acts "on behalf of, or at the instruction of, any person or entity." An agent must name itself in every web request, using a label in the form "Agent/[agent name]", must not disguise itself by mimicking human typing or solving CAPTCHAs, and must stay away if Amazon says so.

What Meta says

In the first reports, Meta had not responded publicly to the block. Its September 8 launch post does address the credential question directly: Meta says Muse "has no visibility into people's passwords or payment methods," and that logins a user shares go into secure storage the agent can use without seeing. So on credentials, the two companies' accounts conflict, and neither has published evidence that settles it.

This is about control, not just security

Amazon is not against shopping agents. It is against shopping agents it does not run. Its own assistant, Rufus, can already be told to buy an item automatically when it drops to a target price. It sued the AI company Perplexity in November 2025 over Perplexity's Comet shopping agent, and in March a federal judge granted Amazon a preliminary injunction against it. It has also expanded its robots.txt file, the public list of bots a site asks to stay away, to cover AI crawlers from OpenAI, Google, Meta and others.

And on September 23, three days after the block, Amazon opened its seller tools to outside AI assistants, starting with Anthropic's Claude. Agents are welcome on Amazon where Amazon chooses them.

The money explains why. Amazon's store is also one of the world's largest advertising businesses, built on shoppers searching, comparing and clicking inside it. GeekWire framed the underlying fight as a question of who owns the customer relationship once an agent, not a person, does the browsing. An agent that picks the product and checks out skips every page Amazon sells ads on.

Others went the other way

The same week, much of retail opened the door. On September 21, Shopify agreed to let Muse check out through Shop Pay on Shopify stores. Meta's Connect event on September 23 added Walmart, Best Buy, Gap, Sephora and Wayfair as shopping partners. On September 28, Shopify went further and opened checkout to browser-based AI agents in general, with the buyer still confirming the order before it goes through.

So there are now two models: the walled store that decides which agents may enter, and the open store that wants to be wherever the shopping happens. Both are legitimate. Which one fits you depends on what you sell and how you make money.

What this means for your business

If you sell online, from a Shopify store in Montreal to a WooCommerce site in Dakar, here is the practical version.

1. Find out whether you have already decided. Shopify's help pages say merchants are discoverable and purchasable in Muse by default, with direct checkout switched on for eligible stores. You can change this under Sales channels, then Agentic, in your Shopify admin. Many owners will discover they opted in without knowing. Other platforms will follow, so check your settings after every major update.

2. Decide on purpose. Ask what an agent customer is worth to you. If your margin depends on upselling, bundles or a relationship with the buyer, an agent that buys one item and leaves may cost you more than it brings. If you sell commodity products where the cheapest reliable seller wins, being invisible to agents may cost you sales.

3. Write an agent policy. Amazon's terms are a useful template even if you do the opposite: say whether agents are allowed, require them to identify themselves, and say what happens if they do not. Remember that robots.txt is a request, not a lock. Well-behaved bots respect it; others ignore it.

4. Learn to see agent traffic. Check whether your host or security service can label automated visitors. Standards are emerging that let an agent prove who it is: Web Bot Auth, a draft standard led by Cloudflare, has agents sign each request with a cryptographic key a website can check. On September 10, Visa, Mastercard and Ant International said they would work towards common rules for identifying and verifying AI agents that make payments. None of this is finished, but it is where "verified agent" will come from.

5. Keep a human at the till. Whatever you allow, require the buyer to confirm payment themselves. If an agent places an order a customer did not intend, you will be the one handling the refund or the chargeback.

If you build your own shop with AI tools, the same thinking applies to your code: our Vibe Coding Like a Software Engineer track covers keeping secrets and payment details where no automated visitor can reach them.

What this means for shoppers

An agent that shops for you needs your logins or your payment details, or both. Before you hand them over, check three things: whether the agent asks you before every purchase, where your passwords are stored and who can see them, and who pays if it buys the wrong thing. Muse is available only in the United States for now, but agents like it are coming to every market, and these questions travel with them. Our guide to Muse, three weeks in covers its settings in detail.

Questions You Should Be Asking

• Is our store already open to AI agents by default, and who on our team knew?
• Would we rather be in every agent's catalogue, or keep the customer on our own site?
• Can we tell an agent from a person in our traffic today?
• If an agent places an order our customer disputes, who carries the loss under our terms?
• Do our terms of service say anything about automated buyers at all?

What To Watch Next

Whether Meta changes Muse to identify itself on the web, which would answer one of Amazon's stated objections and test whether the others were the real ones. And whether the Visa, Mastercard and Cloudflare efforts settle on a single way for agents to prove who they are. When they do, "allow verified agents only" becomes a setting any small shop can switch on. For the wider picture, see what happened when other agents went off-script this month.

Sources

• GeekWire: Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping
• GeekWire: Who owns the customer relationship when an agent does the buying?
• Bloomberg: Amazon blocks Meta's Muse AI agent from its retail site
• Forbes: Amazon blocks Meta's Muse agent from shopping on its platform
• Engadget: Amazon bars Meta's Muse AI from shopping on its site
• Campaign: Amazon blocks Meta's Muse from shopping on its platform
• CNN: AI agents promise to do everything for you. There may be a big wrinkle in that plan
• Amazon: Conditions of Use
• Meta: Introducing Muse
• CNBC: Amazon wins court order to block Perplexity's AI shopping agent
• Modern Retail: Amazon quietly blocks AI bots from Meta, Google, Huawei and more
• eMarketer: Amazon edges deeper into agentic commerce with Rufus 'Auto Buy'
• GeekWire: Amazon opens its seller tools to outside AI agents, starting with Anthropic's Claude
• PYMNTS: Shopify brings Shop Pay checkout to Meta's Muse AI agent
• Shopify Help Center: Selling on Meta through agentic storefronts
• PYMNTS: Shopify opens store checkouts to AI agents
• TechCrunch: Everything new coming to Meta's AI agent Muse
• Cloudflare: The age of agents, cryptographically recognizing agent traffic
• The Next Web: Visa, Mastercard and Ant International team up on ID checks for AI agents
• Fortune: Mastercard and Visa race to set AI shopping payment standards