Agentic Shopping, Blocked
Amazon just
showed Meta's agentthe door.
Meta's new personal AI agent, "Muse," launched to fanfare and 730,000 downloads in five days. In the middle of that surge, Amazon shut Muse out of shopping on its own site entirely — the latest flashpoint in a new fight over whether one platform's agent can be trusted on another's turf.
What Happened
"Just buy it for me"
stopped working
In September 2026, Amazon cut off purchases made through Meta's personal AI agent "Muse" on its own site. By Sunday evening, anyone trying to complete a Muse-driven purchase saw a popup reading: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed," according to multiple reports.
Meta had just launched Muse this month as a personal AI agent that can send emails, book travel, fill out forms, and shop on a user's behalf. It topped 730,000 downloads within five days — reportedly outpacing ChatGPT's and Claude's download numbers over the same stretch.
| Amazon's claim | Meta's response |
|---|---|
| Muse browses while concealing that it's an AI agent | Says it acts with the user's explicit permission |
| Appears to collect and retain login credentials | Says Muse never sees passwords or payment details |
| Could reach account pages and order history | Says shared credentials go into secure storage |
| Had already asked to be excluded beforehand | Kept operating unchanged after the request |
The standoff, in numbers
Before blocking Muse, Amazon had approached Meta and asked it to keep Amazon.com out of Muse's scope, according to GeekWire and other outlets. This isn't the first time Amazon has named and blocked a specific company's shopping agent: it took the same step against search company Perplexity's purchasing bots and even won a temporary court order over it. The Muse block is best read as the second instance of the same pattern, not an isolated incident.
A private request first
Before blocking anything, Amazon informally asked Meta to keep Amazon.com out of Muse's browsing scope.
Blocked with a popup
When nothing changed, Amazon cited a Conditions of Use violation and started showing a warning popup that halts Muse-driven purchases.
Meta pushes back publicly
Meta responded that Muse "has no visibility into people's passwords or payment methods" and that shared credentials "go into secure storage," locking in the public standoff.
An AI shopping on your behalf isn't
a customer the storerecognizes.
Who It Affects
Who this actually changes things for
Muse users
Any Amazon-related auto-purchase stops working right now. Automation on other sites is presumably unaffected, but expect the "it'll just buy anything for me" promise to get scaled back.
Site operators and developers
Deciding how far to let AI agents into your own site now needs more than terms-of-service language — it needs a technical enforcement layer too. Amazon's move is a template others may copy.
Enterprise AI adopters
Whether you're on the receiving end of agents or sending your own out flips your interest in this fight. Either way, getting credential-handling terms sorted out is now urgent.
What's Next / Risk
This isn't a one-off spat
What makes this significant is that it's not Amazon's first time. Amazon already blocked Perplexity's purchasing bots and won a temporary court order over it. Doing the same to a platform as large as Meta builds a precedent: a site operator can unilaterally pick and choose which AI agents it lets in. The thing to watch next is whether other major e-commerce sites follow Amazon's lead, or instead market themselves as "agent-friendly" to differentiate.
There's no clean answer here yet. Amazon's claims (identity concealment, credential retention) and Meta's rebuttal (no access to passwords, secure credential storage) directly contradict each other, and neither has been independently verified. This is also a private enforcement action under one company's terms of use, not an industry-wide rule. As the agent economy grows, expect this site-by-site patchwork — where a feature that works on one destination suddenly doesn't on another — to persist for a while, leaving users with a genuinely unpredictable experience.