Shopify Plans Muse Checkout; Amazon Blocks It

Shopify plans to let Meta’s Muse buy through Shop Pay. Amazon blocked the same agent from shopping on Amazon.com. One shopping assistant can be welcome at one checkout and forbidden at another.

AI agents can find products without owning the right to buy them. As agents begin to act for customers, the strategic choke point moves from the interface that recommends an item to the authorization layer beneath checkout: merchants, marketplaces and payment operators can decide which agent may transact, what a customer has permitted it to do, and when to refuse the order. Shopify, Amazon and Walmart are giving different answers to that question.

Shop Pay was built to travel beyond Shopify’s storefronts

Shopify’s original problem was not how to build the shopping interface everyone would use. Its merchants needed a way to complete sales wherever customers encountered their products. In 2021, Shopify brought Shop Pay to Instagram and Facebook Shops, placing its checkout beneath someone else’s consumer experience. It also expanded Shop Pay to US merchants on Facebook or Google whose stores did not run on Shopify.

That design let Shopify pursue transactions without requiring it to own discovery. OpenAI later launched Instant Checkout with US Etsy sellers and planned to add Shopify merchants, offering another route from an external interface to a merchant’s sale. In September 2026, Shopify said Muse would be able to complete purchases at Shopify-powered stores through Shop Pay. Five years after the Facebook Shops expansion, the visitor to checkout was no longer necessarily a person pressing a button on a social app; it could be software acting for that person.

Shopify reported second-quarter gross merchandise volume of $115.57 billion, up 32% year over year. That is the scale of its merchant network, not a measure of agent-led orders. The Muse announcement establishes a planned path into that network but gives no launch date, list of participating merchants, buyer availability, completed-order volume or conversion rate.

An agent needs an entrance, not just a product recommendation

A purchase crosses boundaries that a recommendation does not. A business must make an item available for sale, accept the order, recognize the customer’s authority to pay and leave a record that can be examined if the transaction is disputed. A conversational interface can assemble a cart, but it cannot settle those conditions by describing the cart more persuasively.

Walmart made the entrance explicit. Its Agent Gateway lets AI agents shop on Walmart’s site, while Agent Profiles authorize agents and track their purchases separately. The gateway addresses how outside software reaches Walmart; the profiles address which software Walmart recognizes and what it did. Walmart is admitting agents without treating every visiting bot as an ordinary customer.

Shop Pay’s proposed Muse integration leaves important operating terms undisclosed. Shopify’s Muse–Shop Pay plan leaves open who would hold the customer’s authorization or payment credentials, whether merchants would opt in, how a mandate would be revoked or audited, and how Shopify, Meta and merchants would divide liability for fraud, returns and chargebacks. A planned checkout path is not yet a published account of who is responsible for an order.

Amazon’s refusal follows a rule Shopify once invoked

Amazon blocked Muse from shopping on Amazon.com, citing terms-of-service violations, security risks and a lack of merchant consent. The refusal did not mean Amazon opposed every connection to rival commerce platforms. Amazon also expanded Seller Central tools that let US merchants manage sales across eBay, Shopify, TikTok and Walmart. Giving sellers multichannel operating tools is a different decision from letting an outside consumer agent place orders on Amazon’s marketplace.

Shopify has occupied the other side of this boundary. It previously warned merchants against Amazon’s Buy with Prime checkout, calling it a security risk and a violation of Shopify’s terms. Amazon subsequently announced an app for native Buy with Prime integration in US Shopify stores. An objection to an unapproved checkout path did not foreclose a negotiated one.

These are not identical disputes: Buy with Prime entered Shopify merchants’ stores, while Muse sought to shop on Amazon.com. But both operators reserved the right to determine how an outside service could cross into a transaction they governed. Shopify’s willingness to work with Muse does not make its storefronts open to every agent, any more than Amazon’s refusal means it cannot admit one under different terms.

Protocols can specify the handshake, not compel acceptance

Meta, Walmart, Shopify, Stripe and others published the Personal Agent Protocol to standardize and secure AI-bot interactions with businesses. Google’s Agent Payments Protocol, or AP2, addresses secure agent-led payments across platforms and had support from more than 60 organizations at launch. Visa introduced Intelligent Commerce Connect for agent payments across multiple card networks. Each effort addresses a real coordination problem: an agent and a business need a way to communicate identity, instructions and payment intent that both can interpret.

None of those efforts requires a marketplace to accept a particular agent. Amazon can still apply its platform rules; a Walmart profile can still distinguish one authorized agent from another. A common format makes a request legible. The operator receiving it still decides whether the request is permitted.

Payment activity explains why companies are building those interfaces before the admission rules have settled. Stripe Link reported a 38-fold increase in agentic transactions and a 20-fold increase in agentic payment volume in September, with retail leading both measures and average spend near $100. Those are early measures of activity on one payment product, not evidence that Shop Pay, Stripe Link or any other rail has won durable control of agent checkout.

A purchase mandate must outlast the chat that created it

Walmart’s separate purchase tracking gives an agent’s actions a record distinct from the customer’s ordinary shopping history. World’s AgentKit takes another part of the problem: it lets sites verify that a real human is behind an AI shopping agent’s purchasing decisions. Six major banks, including Bank of America and Capital One, warned that greater chatbot autonomy could increase scams, fraud and disputes.

A useful consent architecture must let a customer set the scope of a purchase, inspect what the agent did and correct or withdraw an instruction. Merchants and payment providers also need records they can use when an order is challenged. The unanswered Muse–Shop Pay terms matter because a smooth checkout cannot, by itself, identify who consented to a changed order or who must handle a chargeback.

Agentic coding platforms face the same structural separation: an agent can produce a change, while the owner of the repository controls its permissions and review. The distinction is not whether the agent is capable of acting. It is whether the system that bears the consequences has authorized that action.

The chat may keep the customer without keeping checkout

OpenAI initially put Instant Checkout inside ChatGPT. It later scaled back direct shopping there, shifting checkout into apps integrated with ChatGPT. Walmart reportedly found that OpenAI Instant Checkout converted at a rate three times lower than flows in which shoppers clicked out. That comparison does not prove that in-chat purchasing cannot work; it does show why a shorter path is not automatically a better one.

Large counts of agent payments require similar care. Chainalysis reported more than 138 million agentic-commerce transactions on Coinbase’s Base in the third quarter of 2026, but more than 87% of those payments were below ten cents. Automated payments at that size say little about a customer delegating a retail purchase with a return policy and a disputable charge.

At the proposed Muse checkout, a basket may arrive from Meta. The receipt still needs a payer, a limit on what was authorized and an address for the dispute.