🔍 Read the full analysis: Two Retail Giants, Two Rules For AI Shopping Agents on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Walmart announced an AI Agent Gateway and spending controls on Oct. 21, while Amazon has blocked Meta’s Muse agent from accessing its site. The split highlights a growing dispute over security, checkout, customer relationships and who receives credit when an AI agent shops.
Walmart is opening a structured route for AI shopping agents, while Amazon has blocked Meta’s Muse from accessing its shopping site, a contrast that puts retailers’ control over automated purchases in focus. Walmart announced its Agent Gateway and Agent Profiles on Oct. 21; the gateway is designed to let approved agents search inventory and make purchases, while profiles can set spending limits.
Walmart’s Agent Gateway uses the Model Context Protocol (MCP) to connect approved agents to shopping functions such as inventory search and purchasing. Its Agent Profiles are intended to let customers set limits on an agent’s authority. The announcement does not establish that every AI assistant can use the gateway or that all purchases can be made without further customer approval.
Amazon has taken a different approach with Muse, Meta’s browser-based personal agent. After blocking the agent in September, Amazon said it had not been told Muse would shop on its site, did not identify itself as an agent and appeared to capture and store customer credentials. Meta disputed the credential concern: its launch post said Muse has no visibility into users’ passwords or payment methods. The competing accounts leave the precise technical and security dispute unresolved.
Meta said on its Oct. 21 earnings call that more than 10 million people in the United States and Canada had set up Muse in roughly six weeks. The company said shopping was its most common use and that the average purchase was over $200. Those are Meta’s own figures; they do not independently establish how often agents complete purchases or how much business they generate for retailers.
Agentic shopping
Three ways an AI agent buys for you
Every fight between shops and AI agents comes down to which of these three routes the agent uses, and whether the shop agreed to it.
The browser, like a human
The agent opens pages built for people, signs in with your login and clicks through checkout. Works almost anywhere, which is why shops object: they can't tell the agent from you.
Examples: Meta's Muse (from a virtual machine in Meta's cloud), Perplexity's Comet (from your own computer)
The shop's own agent door
Approved agents search and buy through a structured interface instead of clicking through pages. The shop sets the rules.
Examples: Walmart Agent Gateway (MCP, beta), Shopify MCP server and WebMCP checkout tools
Shared protocols
Common rules for who the agent is, what you allowed, and how the checkout and payment are confirmed.
Examples: Personal Agent Protocol (draft), Universal Commerce Protocol, Agentic Commerce Protocol
The protocols competing to be the standard
| Protocol | Backers | Covers | Status |
|---|---|---|---|
| Personal Agent Protocol (Poppy) | Sierra, Meta, Walmart, Shopify, Stripe + 35 design partners | Agent identity, customer permission, one session across site, API and company agent | Draft 0.1 (9 Oct 2026) |
| Universal Commerce Protocol (UCP) | Google, Shopify; site also lists Etsy, Wayfair, Target, Walmart, Amazon, Microsoft | Discovery, cart, checkout, orders; payment mandates via AP2 | Published |
| Agentic Commerce Protocol (ACP) | OpenAI, Stripe | Checkout between agent and merchant | Open source; ChatGPT's own checkout scaled back in March 2026 |
What a careful agent purchase looks like
- You give the task and a limit, for example a $50 cap.
- The agent identifies itself to the shop and gets only the access you approved.
- It prepares the cart and shows you an approval card.
- Payment goes through a token or one-time card, so the agent never sees your card.
- The shop’s normal returns apply if the agent got it wrong.
Sources: Meta (8 Sep 2026), Walmart (21 Oct 2026), TechCrunch on Shopify (28 Sep 2026), Sierra (9 Oct 2026), ucp.dev, agenticcommerce.dev, OpenAI (24 Mar 2026). Purchase steps: Walmart’s agent terms and Meta’s Muse description.
Powered by Thorsten Meyer AI
Retailers Set the Rules for AI Buyers
The disagreement is about more than whether an agent can reach a product page. It concerns who controls the shopper’s relationship with a retailer, how a purchase is authenticated, and who receives revenue or credit when software acts for a customer. A retailer that provides an agent interface can set terms for access and checkout; a retailer that blocks outside agents can steer shoppers toward its own tools.
That has consequences for shoppers and businesses that rely on referral links. The source reports that Amazon’s Associates program ties commissions to customers clicking tracked links. If an agent reads a review and completes a purchase without that click, the publisher may not receive the usual referral credit. The source also cites HUMAN Security data from September indicating that 81% of agent requests went to product and search pages, while 2.4% went to checkout and payment. Those figures describe the observed requests in that dataset, not all AI shopping activity.
For consumers, agent convenience does not remove the need to understand who is authorizing a purchase. Walmart’s spending controls address one part of that concern, but customers still need to know how an agent handles payment details, returns and mistakes. The source notes that Meta’s Muse uses a cloud-hosted virtual machine and pays through Link by Stripe with a one-time-use card; those design details do not settle every question about liability or data handling.
Products Worth Considering
Bose SoundLink Flex (2nd Gen) Portable Bluetooth Speaker
Amazon Kindle Paperwhite (12th Generation, 2024), 16 GB, 7-inch Display, Jade
Samsung 27-inch Odyssey OLED G6 QD-OLED QHD Gaming Monitor
As an affiliate, we earn on qualifying purchases.
From Browser Bots to Retail Gateways
The recent sequence shows how quickly the debate has shifted from experiments to competing infrastructure. Meta launched Muse on Sept. 8, 2026, describing it as a personal agent that can open a browser, fill out forms and negotiate for a user. On Sept. 20, users encountered Amazon’s block. Three days later, Meta announced retail connectors with Walmart, Best Buy, Gap, Sephora, Wayfair and Expedia.
Other companies are pursuing structured connections rather than relying only on agents operating websites as people do. Shopify introduced tools for browser agents to complete checkout, while Meta and Sierra announced the Personal Agent Protocol, also called Poppy, with Walmart, Shopify and Stripe. Its draft was published Oct. 9, according to the source. Multiple protocols are in development, and their functions and adoption differ; the existence of a standard proposal does not mean retailers or agents have adopted it widely.
The source also points to a cautionary example: OpenAI and Stripe launched Instant Checkout in ChatGPT using the Agentic Commerce Protocol in September 2025, then OpenAI stepped back from that checkout approach in March 2026. OpenAI said the initial version lacked the flexibility it wanted and that merchants could use their own checkout experiences while the company focused on product discovery. This illustrates that building technical links is not the same as establishing a durable shopping system.
“Muse has no visibility into people’s passwords or payment methods.”
— Meta, in its Muse launch post
Security, Scale and Purchase Control
It is not yet clear how many retailers will connect to Walmart’s gateway, which outside agents will be approved, or how the system will handle disputes and refunds. The announcement describes access and spending controls but does not specify every permission, verification or consumer-protection rule that will apply in practice.
The claims at the center of Amazon’s block also remain contested. Amazon said Muse did not identify itself and appeared to capture and store credentials; Meta said it cannot see passwords or payment methods. The available source material does not independently verify either account or explain what evidence Amazon relied on.
Meta’s user and purchase figures are company-reported, and the source gives no independent audit or detailed methodology. It is also unclear how often Muse completes checkout rather than researching products, how transactions are attributed to publishers, and whether shoppers can consistently set limits such as requiring approval for every purchase.
Retailer Adoption Will Test the Model
The next test is whether Walmart’s announced gateway becomes usable across a meaningful range of agents and products, and whether its controls give customers and retailers enough confidence to use it. Retailers and protocol developers will also need to clarify how agent identity, customer permission, payments, returns and transaction records work across different systems.
Amazon’s current position leaves shoppers who use Muse unable to rely on it for Amazon product checks, while Amazon can continue promoting its own assistant. Further statements from Amazon and Meta, along with evidence of Walmart gateway adoption and real-world purchase activity, should help show whether agent shopping grows through retailer-approved connections or remains divided among closed platforms and browser-based tools.
Key Questions
What did Walmart announce?
Walmart announced an Agent Gateway based on MCP for approved AI agents to search inventory and make purchases, plus Agent Profiles that can set spending limits.
Why has Amazon blocked Meta’s Muse?
Amazon said Muse was an unauthorized agent that did not identify itself and appeared to capture and store customer credentials. Meta said Muse has no visibility into users’ passwords or payment methods. The source material does not independently resolve the disagreement.
How many people have set up Muse?
Meta said on its Oct. 21, 2026, earnings call that more than 10 million people in the United States and Canada had set up Muse in roughly six weeks. That is a company-reported figure.
Does Walmart’s gateway mean an AI can buy anything without approval?
No such blanket access is confirmed. Walmart describes a gateway for approved agents and profiles with spending limits, but the announcement does not specify that every agent, item or purchase will be eligible or that customer approval will never be required.
Why could AI shopping affect publishers?
Some affiliate programs credit publishers when a shopper follows a tracked link and buys. If an agent uses a review to inform a purchase but completes checkout without that link, the publisher may not receive the usual referral commission.
Source: ThorstenMeyerAI.com
