Amazon Bars Meta's Muse Agent From Its Storefront
Amazon has blocked Meta's Muse AI agent from shopping on Amazon. Users who attempt to transact through Muse now see a notice that continued access by an unauthorized AI agent violates Amazon's Conditions of Use. Engadget
Amazon says it first asked Meta to voluntarily exclude Amazon from Muse's reach. It says it never agreed to participate in shopping via Muse on its storefront. The Verge
An Amazon spokesperson said "third-party applications that make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether to participate." Engadget
Two objections sit at the center of the block. Amazon is frustrated that Muse does not identify itself while browsing Amazon's website. It also believes Muse poses privacy and security risks, including access to and retention of customers' information.
Muse launched Tuesday, September 8, 2026, for users in the U.S. Reuters TechCrunch Meta describes it as a personal AI agent that is secure, private and proactive in helping with people's goals. In practice, it can fill out forms, send emails, and shop using a generated single-use card from Link by Stripe. The launch scope also included buying movie tickets and scheduling appointments, Bloomberg alongside booking travel and selling a car on a person's behalf.
Meta's counter is architectural. The company stated that Muse has no visibility into people's passwords or payment methods. Credentials shared by users go into secure storage so Muse can use them without seeing them, including passwords typed into the browser.
The broader context here is permissioning for autonomous browsing. An agent that logs in as the user, drives a standard session, and pays with a single-use instrument collapses several previously separate controls into one flow. Identity, authorization, credential custody, and data retention all have to be negotiated at once. Amazon wants explicit opt-in and self-identification. Meta is arguing that credential isolation plus ephemeral payment details is sufficient protection.
Looking at what this means for technologists building agentic commerce, the near-term path is negotiation rather than pure engineering. Merchant participation, agent disclosure, and limits on session data storage will need to be settled before cross-site agents can operate reliably at scale. That work is tedious. It is also what makes delegation trustworthy enough for ordinary purchasing, which is the outcome that would expand what both storefronts and agents can usefully do.
