Amazon Blocked Meta's Shopping Agent. Shopify Let It In. Where Do You Stand?

Meta launched Muse, its personal AI agent, on September 8. Twelve days later Amazon started blocking it. Shoppers who tried to check out on Amazon through Muse got a popup saying an unauthorized AI agent was breaking Amazon's Conditions of Use.

The next day, Shopify CEO Tobi Lütke went the other way. He said Shopify would "partner deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores," as The Motley Fool reported.

So the same agent was shut out by one platform and welcomed by the other, a day apart. If you sell on Shopify, Shopify has already chosen for you at the checkout level. You still decide plenty, though, and it helps to know what each company was actually protecting.

What Muse is

Per Meta's announcement, Muse is a US-only agent on iOS, Android and the web. The basic tier is free and there are paid plans. It runs in what Meta calls a Muse Secure VM, a dedicated virtual machine with its own browser, so it can "open a browser, fill out forms, and negotiate" for the user.

Payment runs through Stripe's Link. According to Stripe, at businesses that accept Link, Muse checks out with the shopper's saved payment method. Everywhere else, Link issues a single-use virtual card limited to the approved purchase. The shopper approves every total in the chat, and Muse never sees the underlying card details.

Shop Pay was listed as "coming soon" at launch. Lütke's announcement is what delivered it for Shopify stores.

Why Amazon said no

Amazon gave two reasons. The official one, as reported by Android Headlines: Meta never asked permission, and Muse didn't identify itself. Amazon wants third-party agents to "identify themselves clearly in browser traffic rather than disguising themselves as human shoppers."

That's a fair complaint, as far as it goes. The unofficial reason is in the same article: Amazon's ad business brought in more than $68 billion last year. An agent that goes straight to the product and checks out never sees a sponsored listing. Every Muse purchase on Amazon would be a purchase Amazon couldn't sell ads against.

Amazon also runs its own agent, Buy for Me, which lets customers shop from other retailers' sites without leaving Amazon. So Amazon's position isn't really "no agents." It's "no agents that aren't ours."

Why Shopify said yes

Shopify doesn't sell sponsored listings inside your store. It earns on payments and subscriptions. An order placed by Muse through Shop Pay earns Shopify the same as one placed by a human, so for Shopify every agent is just another sales channel.

Shopify also answered Amazon's identification complaint in its own protocol. Its checkout docs for agents require agents to sign requests with Web Bot Auth, and they warn that unregistered agents may be "deprioritized or blocked." Agents also have to show the buyer the order total and get permission before placing it.

For merchants, the incentives line up. You don't run an ad marketplace either. A sale is a sale, and an agent that shows up with a confirmed buyer and a Shop Pay token is about as qualified as traffic gets.

The legal backdrop changed in August

One more piece of context makes blocking harder for anyone. On August 4 the Ninth Circuit vacated an injunction Amazon had won against Perplexity's Comet browser agent. The court found that when a user directs an agent through their own browser, it's the user who "accesses" the site under the federal anti-hacking law, not the AI company. The court called the agent "a tool, not a person."

The court limited its ruling to the facts in that case, and Jones Day's summary points out that sites can still use terms of service and technical blocks. But the easy legal route for keeping agents out is mostly closed. The practical takeaway for merchants: treat a user-directed agent as a visitor with an assistant, not as a scraper.

Crawlers and agents are different things

This is where merchants get confused, so it's worth slowing down.

Cloudflare's July update sorts AI bots into three groups, and the split is useful even though your Shopify store doesn't use Cloudflare's dashboard:

• Search bots crawl and index content so they can answer questions later and send you referral traffic.
• Agent bots act in real time for a specific person, like ChatGPT fetching a page mid-conversation or a browser agent completing a task.
• Training bots collect content to train models.

From September 15, Cloudflare blocks Training and Agent bots by default on ad-monetized pages for new domains, and leaves Search bots alone. That default makes sense for a publisher living on ad revenue. It's the wrong default for a store. A shop page exists to sell, and an agent arriving with a buyer is the visit you want.

Your robots.txt (editable in Shopify via the `robots.txt.liquid` template) was built for crawlers. It's a reasonable place to decide about training and search bots. It does very little about a browser agent working for a shopper, and after the Ninth Circuit ruling, trying to treat that agent like a crawler is a weak position anyway.

The other Muse: one that works for you

On September 29 Meta also announced Muse for Small Business, the same agent pointed at the owner instead of the shopper. Meta says it connects to more than 20 platforms including Shopify, analyzes sales and campaigns, and suggests improvements to ads and content. It's available in the US and Canada, free for most features.

I haven't seen independent reviews of it yet, so I'd hold off on giving it write access to your store. But it shows where Meta is heading. They want an agent on both sides of the purchase.

What to do

Shopify has made the big decision already: agents can check out, and there's no merchant toggle for it. What you control sits around that.

1. Decide your training-bot policy on purpose. Blocking training crawlers in robots.txt while allowing search crawlers is a defensible choice. Blocking everything AI-related is not, because you'll vanish from AI answers along with the training sets.
2. Don't treat agent orders as suspicious by default. If your fraud rules or a third-party fraud app flag unusual browser fingerprints, keep an eye out for false positives on Shop Pay orders over the next few months.
3. Make your store easy for a stranger's assistant to understand. Muse arrives knowing nothing about your brand. Clear product titles, plain-language policies and accurate stock carry the sale.
4. Watch your Shop Pay share. If Shop Pay orders rise without a matching rise in sessions, agents are a likely reason.
5. Write down your position. A sentence in your internal docs ("we allow shopping agents, we block training crawlers") saves a panicked decision the first time something odd turns up in your orders.

Amazon can afford to keep agents out because shoppers go to Amazon anyway. Most Shopify stores don't have that kind of pull. For a smaller store, a stranger's assistant that already knows what it wants to buy is worth letting in.