DEV Community

Cover image for Meta Muse blocked by Amazon: the AI shopping agent fight, explained
Nikoloz Turazashvili (@axrisi)
Nikoloz Turazashvili (@axrisi) Subscriber

Posted on

Meta Muse blocked by Amazon: the AI shopping agent fight, explained

#ai #amazon #meta #aiagents

Meta Muse, the personal AI agent Meta launched on September 8, can no longer shop on Amazon. Since Sunday night, Muse users who ask it to buy something there get a popup saying "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use", according to GeekWire. If you build anything that browses the web on a user's behalf, this is the first big test of who decides whether your agent gets through the door: the user, the agent's maker, or the store.

TL;DR

  • Amazon blocks Muse with a Conditions-of-Use popup served to the customer's session plus an anti-bot wall. No lawsuit, no hacking claim.
  • Amazon's complaints: Meta never said Muse would shop there, Muse doesn't identify itself, and it "appears to capture and store customer credentials". Meta's launch post says Muse never sees passwords.
  • Amazon tried the court route against Perplexity's Comet. It won an injunction in March and lost it in August: the Ninth Circuit said the user, not the AI company, is the one accessing Amazon's computers.
  • Amazon's own agent, Buy for Me, shops on other retailers' sites, and small Shopify merchants say it listed their catalogues without asking.
  • The money behind it: more than $68 billion a year in Amazon ads, which need a human looking at the page.

What is Meta Muse?

Two weeks before the block I covered Meta's Muse launch. Per Meta's announcement, Muse is a personal agent that runs on "Muse Secure VM", a dedicated cloud virtual machine with its own browser. It works like a human with a laptop: "If it has no API at all … the agent can use the service through a browser the way you would." Amazon has no shopping API for outside agents, so on Amazon, Muse clicks.

Meta built two safeguards in. A separate agent called Sentinel must approve anything Muse sends to the internet, and payments go through Stripe Link one-time card numbers. On credentials, Meta says: "Muse has no visibility into people's passwords or payment methods. Any credentials a person shares go into secure storage, so Muse can use them without seeing them."

How Amazon blocks Meta Muse

Amazon didn't sue. It did two things.

First, the popup. The text is addressed to you: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed." Amazon says it had first asked Meta to remove Amazon from the Muse experience, and Meta didn't.

Second, a bot wall. The Register tested it on Monday, asking Muse to find "the best-reviewed ergonomic office chair" and add it to the cart. Muse's answer:

"Hit a snag: Amazon is showing an anti-bot wall that blocks automated browsers outright – the browser couldn't even get to the search page … I didn't push past it, since the notice says continuing would violate Amazon's terms."

The Register, Sep 21 2026:

The politest thing a Meta product has ever said, and a design choice worth copying: the agent stops at a terms notice.

Amazon's case against Muse has three parts, per an Amazon spokesperson to GeekWire:

Amazon says Meta's launch post says
Meta never told Amazon that Muse would access the store (no answer; Meta didn't respond to GeekWire or The Register)
The agent does not identify itself when browsing Muse browses "the way you would"
It "appears to capture and store customer credentials" and can reach order history if prompted Credentials sit in secure storage; Muse "has no visibility into people's passwords"

Both can be true at once. The password sits in a box on a computer Meta owns, and the agent holding the key promises it never looks.

Amazon's statement sets out the rule it wants: "third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate", the way food delivery apps and online travel agencies do.

Amazon vs Perplexity: why Amazon stopped suing the bot

Amazon has tried the front door before. In November 2025 it sued Perplexity over the Comet browser's shopping assistant, under the federal Computer Fraud and Abuse Act (CFAA) and California's equivalent. On March 10, 2026 a judge granted a preliminary injunction barring the agent from logged-in parts of the site (CNBC, GeekWire).

On August 4 the Ninth Circuit vacated it (HN). Its reasoning: when the agent follows the user's instruction, the user is the one "accessing" Amazon's computers under the CFAA, not Perplexity, so Amazon was unlikely to win on that claim. Amazon asked for a rehearing; it was denied on September 10.

The ruling left contract and terms-of-service claims open. That is exactly the route the Muse popup takes. It doesn't say Meta broke in. It says you agreed to the Conditions of Use, and your agent is breaking them. Ten days after the rehearing denial, Amazon stopped addressing the bot's maker and started addressing the shopper.

Amazon Buy for Me: the agent that didn't ask first

Now the awkward part. Amazon runs an agent too. Rufus became Alexa for Shopping in May 2026, and Amazon says Rufus "helped over 300 million customers in 2025". Its Buy for Me feature "handles the entire purchase on your behalf using your primary address and credit card" on other retailers' websites. Amazon says Buy for Me identifies itself and lets brands opt out.

Opt out is the key word. In January, Modern Retail found small Shopify merchants (Bobo Design Studio, Mochi Kids, Peachie Kei) whose whole catalogues had appeared on Amazon through Buy for Me without them opting in: 4,000 products in Mochi Kids' case. Orders arrived from an @buyforme.amazon address. The way to say no was to e-mail Amazon. Angie Chua: "They just opted us into this program … and essentially turned us into drop shippers for them, against our will" (HN).

So Amazon's rule for other people's agents is "respect service provider decisions about whether or not to participate". Its own agent shipped with an opt-out e-mail address.

Why Amazon blocks AI shopping agents: the $68 billion seat

The complaint is about credentials. The reason is the ads. Amazon's ad revenue was more than $68 billion in 2025 (GeekWire), and every dollar needs a human looking at a page of sponsored products. An agent doesn't scroll.

Per Forbes, citing the July earnings call, Andy Jassy said shoppers using Amazon's assistant spend 40 % more per order (a second-hand figure). That's the seat between you and the checkout, and Amazon just said whose chair it is. The HN thread got there fast: "it's the $68B ad business", "Amazon is just anti-someone-else's-agent", and from simianwords, "make a damn MCP, you have 100,000 engineers".

Meta, for the record, does the same on its own turf. Per Forbes, WhatsApp Business terms changed in October 2025 to bar general-purpose AI chatbots such as ChatGPT and Perplexity from the business-messaging API, effective January 15, 2026.

What developers building AI agents should take from this

  • Court and contract are separate fights. The Ninth Circuit made the user the one "accessing" the site under the CFAA. It said nothing that stops a store from enforcing its terms, or from blocking your traffic.
  • Identify your agent. "Doesn't identify itself" is a charge that sticks. Visa, Mastercard and Ant International announced on September 10 that they are working on common rules for shopping agents to identify themselves. Until that exists, a stable, honest user agent string with a contact URL is the minimum. A simplified sketch, not a standard: 
User-Agent: ExampleAgent/1.0 (+https://example.com/agent; acting-for-user)
Enter fullscreen mode Exit fullscreen mode
  • Stop at the wall, and say so. Muse's "I didn't push past it" is the right behaviour. An agent that evades a bot wall turns a terms dispute into a much worse one.
  • Keep credentials out of the agent's hands. Meta's design, a separate vault plus Sentinel approving outbound traffic plus single-use cards, is what Amazon attacked, and it is still the right shape.

Also today: Grok 4.7 and ZuckOff

Grok 4.7. xAI's announcement (HN) promises "half the price of comparable models", while the same page says it is "Served at the same price and speed as Grok 4.6": $2 in and $6 out per million tokens. On xAI's own table it wins Harvey's legal benchmark (19.6 against Fable 5.1's 6.7) and scores 38.0 on Terminal-Bench 4.0 against Fable 5.1's 57.9. Then Vals AI ran its own suite:

Vals AI on X, Sep 21 2026: Grok 4.7 ranks #24 on the Vals Index at 54.2%, down 5.0 points from Grok 4.6 (#14, 59.2%)

Bigger, same price, and by one independent count, worse than the version before (Vals AI).

ZuckOff. ZuckOff is a free app that listens for the Bluetooth manufacturer IDs Meta's glasses broadcast (0x0D53 Luxottica for Ray-Ban and Oakley Meta, 0x058E Meta Platforms Technologies) and tells you a camera is nearby. Nothing leaves the phone. It can't tell whether the glasses are recording. Wired Middle East reports about 7 million pairs sold in 2025 and a recording LED that tape defeats. Top comment on HN: "Great name."

Verdict: NEEDS REVIEW

I stamped it NEEDS REVIEW. Amazon's rule is right: an agent should show its ID at the door, and the store gets to say no. Per Amazon, Meta sent an agent that doesn't identify itself into the biggest store in America without asking, and Meta hasn't answered anyone about it. But Amazon wrote the rule while its own agent lists other people's shops by default with an e-mail opt-out. Amazon's agent should go first.

FAQ

Why did Amazon block Meta Muse?
Amazon says Meta never told it Muse would shop there, Muse doesn't identify itself, and it appears to store customer credentials. Amazon had asked Meta to remove Amazon from Muse first.

Is it illegal for an AI agent to shop on Amazon?
In Amazon v. Perplexity the Ninth Circuit said the user, not the agent maker, is the one accessing Amazon under the CFAA. Terms-of-service claims were left open, which is what Amazon's popup relies on.

What is Amazon Buy for Me?
A feature of Amazon's shopping assistant that buys from other retailers' websites with your Amazon address and card. Merchants can opt out by e-mail.

Sources

This article expands on an episode of **The Daily Diff, a five-minute daily video on what shipped and what broke in tech.
Watch the episode · Subscribe on YouTube · the written diff lands in your inbox every morning at thedailydiff.dev.

Top comments (0)