Shopify plans to allow Meta's Muse to complete purchases on behalf of users at Shopify-powered stores via its one-tap checkout service Shop Pay

Shopify plans to allow Meta's personal AI agent to complete purchases on behalf of users with the e-commerce platform's roster of stores

Wall Street Journal 2026-09-22 Kelly Cloonan

Context & Ripple Effects

Shop Pay had already moved beyond Shopify’s own storefronts, first reaching Instagram and Facebook Shops in 2021 and then becoming available to merchants on Facebook and Google that did not use Shopify’s commerce software. That history makes the Muse arrangement an extension of Shopify’s strategy to make checkout portable across discovery surfaces.

Meta positioned Muse as an agent that can connect apps for tasks including purchases through Stripe’s Link checkout connection. Adding Shop Pay gives Muse a second, merchant-network-specific purchase path rather than leaving its shopping capability tied to one payments integration.

First-order effects

Shopify-powered stores gain a Shop Pay checkout route inside Meta Muse, allowing the agent to complete purchases for users rather than merely direct them to a merchant site.
Meta gains access to Shop Pay across Shopify’s merchant base, while Shopify puts its checkout product at the transaction point within Muse.

Second-order effects

Stripe’s Link and Shop Pay become alternative checkout rails within Muse’s purchase flow, giving merchants and users a choice of established payment credentials as agent-led shopping expands.
Shopify merchants can reach buyers through Meta’s agent interface without building a separate agent-specific checkout, shifting the integration burden toward the platform and payment providers.

Third-order effects

If agent interfaces become a durable discovery layer, merchant storefronts risk yielding more of the purchase journey to the prompt layer, while checkout providers compete to remain the authorized transaction endpoint.
Delegated purchases make permissioning and recourse central commerce infrastructure: platforms must distinguish a user-authorized order from an agent action and resolve errors across the agent, checkout and merchant.

The trend: Commerce platforms are wiring established checkout rails into AI agents, turning delegated purchasing from a product feature into a contest over who controls authorization and the final transaction.

Discussion

@tobi Tobi Lutke on x
We are excited to announce we are partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores, offering people an easy and delightful way to shop and check out with Muse.
@alexandr_wang Alexandr Wang on x
we are excited for muse to be partnering deeply with @Shopify to enable agentic checkout with Shop Pay on all Shopify stores! we want to give our musers access to a wide range of stores to find the absolute perfect products ♥️
@mattprd Matt Schlicht on x
Muse 🤝 Shopify
@joecarlsonshow Joseph Carlson on x
Amazon will have to change directions quickly. I can already see the Meta representatives talking to Amazon “Sure, if you want to block us, that's unfortinate, we'll just send all our customers to Walmart and shopify
@matt_slotnick Matt Slotnick on x
I wouldn't overly read into Amazon posture re Muse right now. Shopify obviously will play nice with meta and be a first mover. Amazon has more at stake and will be more demanding about the relationship, because they have leverage. they also have customer credential risk
@firstadopter Tae Kim on x
Big contrast to Amazon. Shopify doesn't have a big high profit margin ad business to protect.
@illscience Anish Acharya on x
After 20 years of being intermediated by Google every consumer internet company is now urgently trying to figure out how to be on the right side of this new traffic for margin trade. There is a seismic shift coming as agents quickly become the primary consumers on the Internet.
@supbagholder @supbagholder on x
Muse will benefit the long tail. Find the exact product niche you need. No better partner than SHOP.
@finkd Mark Zuckerberg on x
Teaming up with Shopify to make shopping and checkout easier in Muse. Shoppers find more. Shops sell more. More partnerships like this coming soon.
@stockmarketnerd Brad Freeman on x
I'm sure we'll inevitably be seeing a similar headline from $AMZN in the coming months as they figure disagreements out with $META
@shpigford Josh Pigford on x
there's a future where nobody goes to amazon anymore and just shops via their agent who (in the background) taps into the database of products across ALL shopify stores. while amazon blocks agentic shopping, shopify fully embraces it. can't wait for that future.
@gergelyorosz Gergely Orosz on x
I continue to be amazed how the tech industry doesn't realize that the majority of people won't hand over a digital wallet for AI agents to go and spend on stuff, because buying socks + groceries is not a chore to outsource w/o oversight, but an expense to manage...
@ankurnagpal Ankur Nagpal on x
Sidenote: I also suspect Muse and other personal agents will be very good for Shopify An incredible opportunity to build network effects in an already very strong business
@patrickwardle Patrick Wardle on x
Please don't install - it's trivial to turn Muse into the ultimate backdoor 💀👀 Ya, as an AI assistant built to manage your Mac, Muse needs broad access to your digital life. But serious 0-day flaw(s) can let local malware/attackers invisibly hijack it. Let me show you. 🧵
@patrickwardle Patrick Wardle on x
And once a Mac is exploited, you can interact with any of the users “connected” devices also running Muse. ...meaning you remotely task their mobile (iOS) Muse client ...invisibly 📲🔓👀 What can you do? Welll, some very neat iOS stuff!
@dps David Singleton on x
We appreciate this report and have issued a hotfix to the Muse Mac app. This was a local privilege escalation attack, not a remote exploit. Using it to do harm therefore requires malicious code already running on the user's machine under their user account and the practical risk …
@techspence Spencer on x
“Macs can't get malware” 😅
@severeengineer @severeengineer on x
this requires local access, so while it needs to be fixed this isn't a doomsday scenario kinda thing i do still think giving contemporary agents root on your own machine is going to result in a lot of painful lessons though lol
@cryptadamist @cryptadamist on x
important PSA for mac users:
@intcyberdigest @intcyberdigest on x
‼️ BREAKING: A zero-day has been released for Muse, Meta's new AI agent, and a Meta AI security engineering manager who left the company this month says he would never use it, citing security and privacy concerns. He was reacting to the zero-day a researcher posted, which lets ma…
@opsek_io @opsek_io on x
This is a new class of endpoint risk: personal AI agents. Please don't rush on every AI tool that ships. First understand the privileges you are actually granting. Muse is software with broad access to mail, files, messages, and whatever else you connect.
@joy Joy Larkin on x
Happy 0day Monday in personal agent land!
@patrickwardle Patrick Wardle on x
Used it to hack itself? 💀 But please fix, its trivial to exploit and (locally) take over the agent 😭 https://github.com/...
@patrickwardle Patrick Wardle on x
#4 Why is this bad? On a scale of meh to f*cked: 🎙️ Steal your dictated audio 💉 Inject prompts Muse trusts/executes 🔑 Steal your auth token & invisibly control Muse directly Anything you gave Muse access to? Now the (local) attacker has it too: msgs, emails, finances... 💀
@patrickwardle Patrick Wardle on x
#3 (This) bug details Muse has an undocumented setting: endo_voyager_dictation_endpoint ...that can be redirected locally with no special privileges! So when you click 🎙️ and dictate a prompt, Muse sends it to the attacker's endpoint instead 🤦‍♂️
@patrickwardle Patrick Wardle on x
First, one of 0day PoCs: https://github.com/... Run with ‘-h’ for some fun options from the 50+ commands Muse exposes. Then click Muse's 🎙️ and dictate a prompt. That's the trigger. 👀
@aaronblackshear Aaron Blackshear on bluesky
If you install this thing and give it this insane level of access to your computer and all of your accounts, you kind of deserve the finding out stage — arstechnica.com/security/202...
@hypervisible.blacksky.app @hypervisible.blacksky.app on bluesky
I can't believe Meta would do this 🙄
r/cybersecurity r on reddit
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
@jspeiser Joe Speiser on x
muse is the first ai my wife let me put on her phone. her #1 goal, help remove 163,490 promotional emails sitting in her gmail. Shes tried for years by hand, but gmail always freezes when selecting that many. Muse took 3 days, hit multiple gmail limits, but worked around them, an…
@austinkoringark Austin Koring on x
Consumer adoption for personal agents is accelerating significantly faster than the previous chatbot era as Muse debuted just 13 days ago. Within 8 days Muse has cleared 200k daily downloads. Comparing that to ChatGPT's launch it took almost an entire year to hit that milestone.
@steipete Peter Steinberger on x
Because this “Meta uses OpenClaw” story is going around. They built their own agent, being inspired. Nat and his team did a great job. Kudos!
@natfriedman Nat Friedman on x
we built muse from scratch, but it is definitely heavily inspired as a product by openclaw. After I used openclaw in january I bought hundreds of mac minis for the MSL team and lots of us fell in love with using openclaw (and other personal agents). @steipete is a genius and his …
@loudmouthjulia Julia Alexander on x
I use Muse in a much more conversational (?) way versus ChatGPT (new Google) or Claude (actual productivity), which makes me think Meta could have an interesting product niche in the way that Threads is doing for at-scale “community” in post-Tumblr/bad-X world. But idk.
@loudmouthjulia Julia Alexander on x
I'm using Muse, and I like it (clearly good word of mouth + decent product going into this activity), but doesn't Meta also have the advantage with launching new products that we've seen with Threads (ie, Instagram -> Threads/FB -> Threads) that makes user numbers alone finicky?
@natlungfy Natalie Lung on x
Meta's new AI agent, Muse, has quickly risen to the top of mobile app charts, a sign that the social media company is gaining traction in the increasingly crowded market for consumer AI assistants Sensor Tower recorded >902k app downloads in the six days after Muse's launch on Se…
@rihardjarc Rihard Jarc on x
Like I was saying the $META Muse reception from users is even higher than that of ChatGPT: First 12 days: -Muse downloads 1.8M vs ChatGPT 1.3M -Muse DAU 642k vs ChatGPT 231k Agents are the real use-case of AI, chatbots were just a different version of Google Search. The market i…
@alexeheath Alex Heath on x
Apptopia sent through these estimates on early Muse usage. External estimates but directionally interesting
@alexeheath Alex Heath on x
Muse is as good as everyone says, but something I'm especially getting a lot of value out of is the Ideas and Feed tabs. Solves the cold start / empty chatbot problem by suggesting things I wouldn't think to prompt
@emollick Ethan Mollick on x
It may be that people also feel safer giving their personal data to Meta (since they already use it) than to other AI companies. If you do decide to try out Muse, a reminder that you can turn off training on your data in Settings>Data controls>Help improve our AI models.
@emollick Ethan Mollick on x
The Labs are focused on enterprise, as that's where the willingness to pay for tokens is highest, so, even though their systems are capable of doing what Muse does out of the box, they are not as intuitive to use. Also, Meta is giving away a lot of compute to make this work well
@emollick Ethan Mollick on x
I think Meta's Muse is an impressive implementation of the OpenClaw idea of AI as a personal assistant agent that you have an ongoing chat with. Since it is so focused on doing that well, the experience is very accessible for people who didn't realize what AI could do for them.
@waitin4agi_ Varun Mayya on x
Muse is sort of proof that the amount of intelligence we have is enough already. It just needed to be more agentic and better with our daily tools and platforms. Anything on PC I still do with ChatGPT and Claude. But Muse is winning my phone. Exceptional product work!
@alexandr_wang Alexandr Wang on x
the most rewarding part about muse is seeing it make a difference for people who aren't in tech and don't give a shit about AI seeing muse click for people in my life outside of tech, and watching them use agents without having to know what a CoT or MCP or CLI are, feels like wha…
@anshnanda Ansh Nanda on x
Bruh... Muse is LITERALLY Openclaw for normies. It's actually just openclaw.
Al Sohrabi Al Sohrabi on linkedin
Meta 🤝 Shopify with Muse 🛍️ — What it means: — • Muse searches Shopify's catalog and checks out right in the conversation …
r/technology r on reddit
Meta's Muse is outpacing ChatGPT's early mobile launch
r/wallstreetbets r on reddit
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
Rohit Nathany Rohit Nathany on linkedin
You were SO CLOSE to checking out! — That was the subject line in my inbox minutes after I exited the shopping task on Muse. …
Khalid Chao Khalid Chao on linkedin
🚀 Shop Pay is coming to Meta's Muse. — Muse already launched with Shopify merchants discoverable through Shopify Catalog and a Shopify-powered direct checkout. …
@jeremiahdillon Jeremiah Dillon on x
For personal agents to be truly useful, they need access to everything. This also makes them particularly dangerous if they end up working for someone else... https://arstechnica.com/...

Chronicles