On Sunday night, people using Meta’s new personal agent, Muse, tried to shop on Amazon and hit a popup. “Continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, to which our customers have agreed.” GeekWire broke the story Monday morning, and startup founder Jonathan Wegener posted a screenshot on X with the caption most people were thinking: “Muse vs Amazon bot detection. Uh oh.”
Amazon’s version, given to GeekWire, is that Meta never asked permission. Muse browses without identifying itself as an agent, appears to capture and store customer credentials, and can reach account pages and order history when prompted. Amazon says it first tried to get Meta to exclude the store voluntarily, then blocked it. Meta’s reply is that Muse has no visibility into passwords or payment methods, because credentials live in secure storage the agent can use but never see.
The security concern here is fair. An agent that moves through your accounts should knock and show ID. Reports that Muse can read message contents it was never given permission to see make the concern bigger.
But look at who is making the argument.
Amazon’s agents shop everywhere
Amazon runs agents across its own business. Its Seller Assistant monitors a seller’s inventory, flags slow-moving products, recommends markdowns, and acts on the seller’s behalf. Sellers report that Amazon’s internal pricing engine reprices listings as often as eighteen times an hour in some categories, and a Marketplace Pulse analysis suggests the system treats third-party prices as something Amazon can move rather than a floor sellers set. Rufus, Amazon’s shopping assistant, helped 300 million customers last year. And then there is Buy for Me: an Amazon agent that goes onto other brands’ websites and buys things for you there. Amazon’s defense of that feature is that it identifies itself and lets brands opt out. That is exactly the courtesy Amazon is demanding from Muse. The rule is reasonable. Amazon just applies it in one direction.
Partners in the cloud, rivals at the checkout
One more layer. Amazon and Meta are partners. Amazon products have sold inside Facebook and Instagram since 2023, and in April Meta signed a multibillion-dollar deal to run its agentic AI workloads on Amazon’s cloud. One arm of Amazon hosts Meta’s agents. The other blocks them at checkout.
Follow the ad money
The motive is not mysterious. Amazon took in more than $68 billion in advertising revenue last year. That money depends on human eyeballs wandering digital aisles, pausing on sponsored products, adding things they did not plan to buy. An agent does none of that. It finds the item, checks the price, and leaves. A store built for browsers has every reason to ban a shopper who never browses.
The court says your agent is you
Amazon also knows the legal ground. It sued Perplexity last year over the same behavior, won an early injunction, then lost in August when the Ninth Circuit ruled that under federal anti-hacking law, the person accessing Amazon’s computers is the user, not the AI company. The court refused to rehear the case in September. In the eyes of the court, your agent is you. Amazon’s remaining weapon is the fine print, the Conditions of Use you accepted, which is what the popup cites.
AI for me, not for thee
The pattern reaches well past shopping. UnitedHealth built a tool called nH Predict to decide when rehab patients had gotten enough care. Families suing the company say patients who appealed its denials won about nine times out of ten, while only 0.2 percent of policyholders ever appealed. A Senate investigation found denials for that care more than doubled after the tool arrived. The insurer had the model and the data. The patients had a form letter.
Reddit works the same asymmetry from the other side: it blocks AI crawlers and is suing Anthropic for scraping, while selling licenses to the same user conversations to Google and OpenAI. The conversation you had on Reddit was never the issue. Who gets paid for it was.
In each case the powerful party uses AI on you and objects when you use AI on it.
The opening: build the Amazon for agents
Which brings me to the opportunity, because this fight is pointing at an enormous one. If a growing share of shopping will be done by agents – and Amazon clearly believes it will, or it would not be building Rufus, Alexa for Shopping and Buy for Me – then a store that only admits humans is a bet against the future of its own industry. Someone is going to build the Amazon for agents: a marketplace where your agent can discover products, compare real prices, find the actual deal, and prove it was authorized to buy for you.
The rails are already being laid. Google’s Agent Payments Protocol, built with more than sixty companies including Mastercard, PayPal and American Express, already exists so an agent can carry a signed record of what you told it to buy. The storefront built for that world does not exist yet. Amazon could own it. Instead, this week, it chose the popup.
What to watch
Here is what to watch as a shopper and as a leader. When a company runs its own agents across every part of your relationship and blocks yours at the door, it has told you who it expects AI to work for. The technology that is supposed to give you leverage is being fenced so it only ever gives them leverage. Your agent is coming either way. The question is whether it arrives as your representative or as their competitor’s trespasser.
My book, The Bias Advantage, is about who gains power when technology changes how decisions get made: https://liatbenzur.com/thebiasadvantage/
Sources
https://www.geekwire.com/2026/amazon-blocks-metas-muse-ai-assistant-in-new-standoff-over-agentic-shopping/ | https://www.theverge.com/tech/998078/amazon-blocks-meta-muse-ai-agent-shopping | https://www.businessinsider.com/amazon-blocks-meta-muse-ai-agent-shopping-site-2026-9 | https://www.aboutamazon.com/news/retail/amazon-shopping-app-buy-for-me-brands | https://www.aboutamazon.com/news/retail/alexa-for-shopping-ai-assistant | https://ecommerce-times.com/amazons-new-ai-powered-dynamic-pricing-engine-is-reshaping-seller-margins/ | https://www.forbes.com/sites/daraabasiita/2026/06/09/the-algorithm-that-counted-on-no-one-appealing/ | https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol
