Amazon Blocks Meta’s Muse, Exposing the Limits of AI Shopping Agents

Introduction

AI assistants are moving beyond recommendations and search toward taking actions for users, including adding products to carts and completing purchases. That shift creates a difficult question: can an agent enter and operate a third-party service simply because a user has asked it to? According to reporting by The Verge and GeekWire, Amazon’s answer for Meta’s Muse is currently no.

Amazon has blocked Muse from shopping on its marketplace on behalf of users. A notice shown to some Muse users said that continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, which customers have agreed to follow.

Key points

• Amazon says Muse was accessing its store without authorization from the retailer.
• The company argued that third-party applications making purchases for customers should operate openly and respect a service provider’s decision about whether to participate.
• Amazon also cited privacy and security concerns, including Muse’s apparent failure to identify itself as an agent while browsing.
• The retailer said Muse appeared to capture customer credentials, while Meta previously said the agent could not see secure login details or card payment information.
• During testing, Muse was able to purchase tank tops from Amazon while other products remained in the basket.
• Muse has faced additional privacy scrutiny after reports that it could see the contents of user messages despite not having the required access permission enabled.

Why the dispute matters

The disagreement is not only about whether an AI tool can click through a checkout flow. An agent that browses, reads pages, and acts under a customer’s session can affect a platform’s control over traffic, account security, commercial data, and responsibility for mistakes. If the software does not clearly identify itself, the retailer may also have difficulty distinguishing an authorized customer from an automated service collecting information or performing transactions at scale.

Amazon has taken other steps to reduce the information available to outside AI services. Since July, confirmation emails have reportedly become less detailed, with specific product names and images omitted. Those changes may make it harder for external systems to mine order information. Amazon also previously sued Perplexity over access to its marketplace in connection with the Comet shopping experience. A judge sided with Perplexity in that case in August, according to the source material.

Broader implications

Muse’s blockage shows that the main obstacle for shopping agents may not be model capability. Authorization, disclosure, privacy, and platform policy are just as important. AI companies may need formal partnerships or clearly defined access arrangements with retailers if they want agents to act reliably across websites.

For users, greater convenience also means greater dependence on permissions and identity safeguards. An agent that can search is one thing; an agent that can use an account, interpret private messages, and place an order carries a much larger risk surface. The Amazon-Meta dispute suggests that cross-platform agentic commerce will be shaped as much by service terms and business incentives as by advances in AI.

Source: The Verge AI