Amazon Shut the Door on Muse and Drew the Line for Agentic Commerce

Meta built Muse to shop anywhere a person can. Amazon has decided that does not include Amazon. Since the night of Sunday, September 20, anyone who asks Meta's personal AI agent to buy something on Amazon.com gets a pop-up instead of an order confirmation: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed."

It is the loudest move yet in a year-long campaign by Amazon to keep outside agents off its store, and it lands on the fastest-growing agent in the market. Within a week of its September 8 launch, Muse was the number one free app in Apple's U.S. App Store, ahead of ChatGPT, according to GeekWire.

Amazon's stated case

Amazon's complaints are specific. Per GeekWire and Adweek, the company says Meta never told it Muse would access the store, that the agent does not identify itself as automated while browsing, and that it "appears to capture and store customer credentials." The result, in Amazon's telling, is an undisclosed third party reading account pages and order history and processing transactions without Amazon's knowledge. Amazon says it asked Meta to exclude Amazon.com from Muse voluntarily and Meta declined.

Its public line frames the issue as consent: "Third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate." Per Techdirt, Amazon compared the arrangement to how food delivery and travel booking services work with the businesses they list.

Meta disputes the security framing. It has said Muse "has no visibility into people's passwords or payment methods," and that shared credentials "go into secure storage, so Muse can use them without seeing them," per GeekWire. The timing did not help Meta. About 12 hours after the block, security researcher Patrick Wardle disclosed a flaw that let any app or terminal command obtain the token tying a user to their Muse account, Techdirt reported. "It's like they didn't, in my opinion, think about security, which is really worrisome," Wardle said.

The $68 billion reason

Security is a real concern. It is also not the whole story. Amazon generated more than $68 billion in advertising revenue last year, GeekWire notes, roughly a tenth of total company revenue according to TechSpot. That business depends on people searching Amazon, scrolling past sponsored listings and accepting recommendations. In the second quarter of 2026 alone, advertising brought in $19.81 billion, up 26% year over year, per 24/7 Wall St.

An agent that picks a product and clicks buy skips every one of those surfaces. As 24/7 Wall St. put it, it "strips out every surface Amazon monetizes." Amazon also loses the behavioral data that tells it what shoppers compared and abandoned. Practical Ecommerce made the same argument in January, when eBay changed its user agreement to prohibit buy-for-me agents without prior approval.

Amazon is not against shopping agents. It is against shopping agents it does not run. It launched Alexa for Shopping in May to research products and make recommendations, and its Buy for Me feature goes out to external brand sites to buy on a customer's behalf, identifying itself and letting merchants opt out. Those are the terms Amazon wants for itself and for everyone else: announce yourself and ask first.

The legal ground is shifting

Amazon has tried the courts before. It sued Perplexity over its Comet browser in November 2025 and won a preliminary injunction in March. On August 4, the Ninth Circuit reversed that injunction, ruling that under federal anti-hacking law it is users, not AI companies, who access websites, GeekWire reports. Amazon's petition for rehearing was denied on September 10.

That ruling weakens the computer-fraud route but leaves contract claims open, which explains the wording of the pop-up. Amazon is not saying Muse broke in. It is saying Amazon's customers agreed to terms that forbid unauthorized agents, and that using one breaks those terms. Amazon has also moved to block shopping agents from Google and OpenAI, and says it is in direct talks with Meta. It declined to comment on possible legal action.

Everyone else said yes

The rest of retail is going the other way. Muse launched with Stripe's Link wallet for agents built in. On September 21, the day after Amazon's block took effect, Shopify CEO Tobi Lütke and Meta's Alexandr Wang announced Shop Pay checkout for Muse across all Shopify stores, with Meta added as a channel in Shopify's Agentic Storefronts. PayPal followed, saying customers can "seamlessly shop and check out using their Muse personal AI agents across PayPal merchants worldwide." Walmart, Best Buy and Dick's Sporting Goods are among the retailers embracing Muse, according to a Yahoo Finance analysis.

The complication is that Amazon and Meta are partners elsewhere. Amazon products have been purchasable inside Facebook and Instagram since 2023, and in April Meta signed a multibillion-dollar deal to run agentic AI workloads on Amazon's Graviton chips. The fight is narrow and commercial, not a breakup.

Why it matters

Agentic commerce is splitting into two models. In one, the agent owns the customer: it holds the intent, compares across stores and sends the order wherever the price and delivery are best. In the other, the marketplace owns the customer and agents come in only on negotiated, identified terms. Shopify, PayPal and Stripe are betting on the first because their merchants gain from being reachable by any agent. Amazon is betting on the second because it is the destination and has the most to lose from being turned into a fulfillment back end.

The leverage question is simple. If shoppers value Muse more than they value buying on Amazon through Muse, Amazon's block costs it sales and pushes volume toward Walmart and Shopify merchants. If shoppers value Amazon's selection and Prime delivery more, Meta has to negotiate on Amazon's terms, likely an agent that identifies itself and respects opt-outs. Meta did not respond to Adweek's request for comment. For merchants, the takeaway is already clear: agent readiness is becoming a distribution choice, and the stores that let agents in are the ones those agents will send orders to.