AI Shopping Agents Can Now Buy From Your Store: What Store Owners Should Know

Are AI Agents shopping your products?

A new kind of customer has started showing up in online stores: AI assistants that shop on a person’s behalf. September brought several large changes that make this easier, and some of them may already apply to your store. This article explains what happened, how it works, and what you can do about it.

What is agentic commerce?

“Agentic commerce” is the industry term for AI assistants, often called agents, that shop for people. A shopper tells an assistant such as ChatGPT what they want, for example “find me a waterproof jacket under $150.” The agent searches stores, compares options, and recommends one. With the shopper’s approval, it can also complete the purchase. The store still ships the order and handles returns and customer service. intelliasretailgazette

What changed in September

Four of the largest companies in payments and online retail each made it easier for agents to buy:

  • Stripe, which processes payments for millions of online stores, updated its hosted checkout pages so agents can complete purchases on them. The change covers more than 7.8 million businesses.
  • Shopify turned on agent checkout automatically for eligible stores.
  • Mastercard expanded Agent Pay, its system for purchases made by agents, on September 30. It now includes a scoring system for transactions started by an agent.
  • Meta released Muse, an AI assistant that can shop and check out at about a million businesses. Amazon blocked Muse from its site shortly afterward.

Together, these changes mean the technology that lets an AI assistant pay a store now exists at large scale. It was put in place in about four weeks.

Why this matters even if you did nothing

If your store runs on Shopify or uses Stripe’s checkout, some of these changes may already be active for you. On Shopify, sharing your products with Meta and allowing direct checkout are both switched on by default, and you can turn each one off in your admin. Take a few minutes to look at those settings so you know what your store currently allows. stellagent

How merchants and shoppers feel so far

Most are cautious. In survey data reported by FinTech Weekly:

  • 93 percent of merchants said the AI company should cover the cost when an agent buys the wrong item.
  • 28 percent are willing to show agents their full catalog on the same terms as human shoppers.
  • About 3 percent of the surveyed merchants’ transactions involve an agent.

Shoppers are cautious too. Forrester found that 24 percent of consumers trust agents with routine purchases.

The main unresolved question is who pays when something goes wrong. If an agent orders the wrong size or misreads a return policy, the store handles the return. For now, that cost generally stays with the merchant.

Amazon has taken the firmest stance. It blocked Muse and sued Perplexity, another AI company, over agent access to its site. Amazon can afford to turn agents away because 90 percent of its shoppers already begin their search on Amazon. Smaller stores depend more on being found, so the choice deserves careful thought.

What an agent sees when it visits your store

An agent reads the written information about each product: the title, sizes and options, materials, price, stock level, shipping time, and return policy. Photos, videos, and page design play little or no part in its decision.

Many product listings were written to rank in search results and to be skimmed by people. Details are often missing, out of date, or different from one place to another. When an agent quotes a wrong price or says a sold-out item is in stock, it is usually repeating information the store published. Amazon’s CEO has raised the same complaint about agents getting prices and delivery details wrong.

Three things help:

  1. Complete product details on every page. Use structured data, a standard way of labeling details such as price and availability in a page’s code so software can read them reliably.
  2. The same information everywhere. The product lists you send to Google, Meta, and other sales channels (called feeds) should match what your website says.
  3. Prompt updates. When a price or stock level changes, it should change in all of those places.

We cover the basics in our guide to what an agent-ready website actually requires. The same steps now apply to your product and checkout pages.

Your three options

  1. Allow agents and keep track. Let agents buy, and track those orders separately so you can see how often they convert and how often they are returned. Add a section on agent purchases to your terms of sale.
  2. Limit what agents can see. Make some products and policies available to agents and keep others for human shoppers. Many merchants already do this informally.
  3. Block agents. This is Amazon’s approach. It avoids the risks, and it means shoppers who use agents won’t find you.

Any of these can be the right choice for a given business. We made a similar point when Cloudflare’s AI defaults started deciding for site owners: review the default settings and pick the option that fits your store.

Where to start

Agent purchases are still a small share of sales, so there is time to prepare. A reasonable first month looks like this:

  • Check your Shopify and payment settings to see what is currently switched on.
  • Review your best-selling product pages for complete, accurate details.
  • Decide which of the three options fits your business.
  • Update your terms of sale to match.

If you’d like help with any of it, that’s work we do every day.

The Agent-Ready Website Is Mostly the Web Done Right

An AI agent booked a hotel room last week without a human ever looking at the website. It read the page, found the form, filled in the dates, and moved on to the next task in its queue. That is not a preview of where the web is going. That is a Tuesday in 2026.

So here’s the question on the table for anyone who owns a site. When an agent shows up to read your content or complete a purchase on someone’s behalf, can it actually do the job? Most teams answer that by bracing for a rebuild. They have it backward. An agent-ready website is rarely a new website. It’s the fast, structured, semantic web you already owed your human visitors, plus two or three genuinely new hooks that are still early enough to be optional.

We build sites for a living, and we’ve watched every “the web is changing, tear it all down” cycle since 2000. Most of them were vendors selling a rebuild. This one is different, because the change is real and the fix is mostly boring. That’s a good thing. Boring is cheaper than panic.

What “agent-ready” actually means

For most of the last two years, browser agents worked like a person with bad eyesight and no patience. They took a screenshot, guessed which pixels were a button, clicked, read the screen back to a model, and hoped. It was slow, and it broke constantly, because your site was never talking to the agent. The agent was reverse-engineering your interface every single time, and a redesign could blind it overnight.

Agent-ready flips the direction of that conversation. Instead of the machine guessing at your interface, your site tells the machine what it can do and what each action needs. Two very different things are happening under that one label, and they get conflated constantly. Agents that read want to find you, understand you, and cite you when a person asks a question. Agents that act want to finish a task on someone’s behalf: compare three vendors, fill the quote form, add to cart, check out. Reading is a visibility problem. Acting is an infrastructure problem. Your site has to be good at both, and they are not the same work.

We’ve written before about why your brand is invisible to ChatGPT, and that piece was about the reading half: getting understood and quoted when an assistant answers a question. This is the acting half. The stakes are higher, because a purchase is worth more than a mention, and the plumbing is harder, because completing a transaction reliably is a lot to ask of a machine that’s poking at a page built for a human thumb. You can read about the visibility side in our take on AI search visibility. This article is about the side where the agent has a credit card.

The numbers stopped being hype

It’s fair to be skeptical of any trend that shows up with a fresh acronym every quarter. This one has receipts. Adobe Analytics measured AI-referred retail traffic growing close to 400% year over year in early 2026, and that traffic converted meaningfully better than ordinary search traffic once it landed. The IBM Institute for Business Value found that 45% of consumers already use AI for some part of the buying journey. McKinsey put a number on the destination: somewhere between $900 billion and $1 trillion of US retail influenced by agentic commerce by the end of the decade. Shopify has already exposed more than a million merchants to agent-driven checkout, and Amazon’s shopping assistant is serving hundreds of millions of people.

Now the part the trend roundups leave out. The infrastructure isn’t ready, and the data says so out loud. When Walmart let people buy inside a chat interface, those purchases converted about a third as well as sending the same shopper to Walmart’s own site. Read that twice. The demand is real. The plumbing is not. That gap between what shoppers want to do and what merchant sites can actually support is the entire opportunity, and it’s a build problem wearing a marketing costume.

Most of an agent-ready website is the web you already owe your users

Here’s the deflating truth for anyone hoping to buy a shiny new layer. The single best thing you can do to prepare for AI agents is the thing you were supposed to do for humans all along. An agent parses your page using the same signals an assistive screen reader and a search crawler have always relied on. Clean, semantic HTML. Headings that actually describe the content beneath them. Forms with real labels tied to real inputs. Buttons that are buttons, not a div wearing a click handler. Structured data that states, in a language a machine can read, what this page is and what lives on it.

We made the case a few weeks ago that the prettiest 2026 web design trends are also the slowest, and that argument holds double here. A three-second hero animation that hogs the main thread annoys a person. It defeats an agent outright, because the agent times out before your beautiful thing finishes painting. Core Web Vitals were never just an SEO scoreboard. They’re now the line between a machine finishing a task on your site and quitting halfway through. If you want the full version of that argument, we wrote it up here.

Accessibility tells the same story through a different door. The markup that lets a blind user move through your checkout with a keyboard is nearly identical to the markup that lets an agent move through it with no eyes at all. A labeled field, a logical tab order, a form that announces its errors: a screen reader needs those, and so does a machine. Do the fundamentals and you’re most of the way to agent-ready before you touch a single new standard. Skip them, and no protocol on earth bails you out. The agent is only as capable as the page is honest about itself.

Isn’t this just SEO with a new coat of paint?

Reasonable question, and the honest answer is: partly, and that’s the point. A lot of “optimize for AI agents” advice is the structured-data hygiene good developers have preached for a decade, repackaged with urgency. If someone is selling you an agentic web package that turns out to be schema markup and a sitemap, you’re not being lied to, exactly. You’re being charged a premium for fundamentals.

But the acting half is genuinely new, and it’s where the coat of paint stops explaining things. Search optimization was about being found. Agent readiness is about being operated. A crawler indexed your content and left. An agent wants to submit your form, apply your coupon, and complete your purchase, and it wants to do that reliably enough that a person trusts it with a card. That’s not a ranking problem. It’s an API problem, and it’s why the next section matters even though the last one told you to fix your HTML first.

The genuinely new hooks: WebMCP and llms.txt

Two things are actually new, and they’re worth understanding before you decide how much to bet on either.

WebMCP is the bigger one. It’s a proposed browser standard, backed by Microsoft, Shopify, and Booking.com among others, that lets your site register its own tools through a new browser API. Instead of an agent screenshotting your checkout and guessing at the fields, your site declares its capabilities out loud: here is a “checkout” tool, here is a “filter_results” tool, and here are the exact inputs each one expects. Google opened a WebMCP origin trial in Chrome in the spring of 2026, which means developers can switch it on for real users and test it in the wild. You can read Google’s own writeup on the Chrome for Developers WebMCP origin trial. There are two ways to expose those tools: annotate the HTML forms you already have, or define functions in JavaScript with a schema describing their inputs and outputs. If you’ve ever built an API, the mental model clicks instantly. You’re handing the agent a clean API to the thing your page already does, instead of making it infer that API from pixels.

The honest caveat matters more than the feature. An origin trial is not a finished standard. It can change shape, and it can be pulled. Building your entire storefront around it today would be a bet, not a plan, and we’d talk a client out of it. But if you run a real transactional flow, a booking, a quote request, a cart, it’s worth a pilot right now. The teams that understand WebMCP while it’s still experimental are the teams that ship it well the day it becomes table stakes. Early is cheap. Late is a scramble.

llms.txt is the low-effort one, and there’s almost no reason to skip it. It’s a plain markdown file at the root of your domain, the same basic idea as robots.txt or sitemap.xml, that tells language models what your site is about and which pages actually matter. Adoption sat around 10% of sites by the middle of 2026, so it’s early, but it costs an afternoon and it can’t hurt you. If you’d rather hand the models a curated map of your site than let them guess from your navigation, you write that map yourself. Most companies haven’t bothered. That’s a cheap edge sitting on the table. You can read the llms.txt proposal and have a draft live before lunch.

Agentic commerce commoditizes the middle. Brand is the defense.

Now the part that isn’t a developer problem at all, and the reason this belongs in front of whoever owns the brand and not just the codebase. When an agent does the buying, it optimizes on whatever it can measure. Price, specs, availability, star ratings. If the person only said “find me a good laptop under a thousand dollars,” the agent runs a spec comparison, and the product with the cleanest data and the lowest number tends to win. That’s a race to the bottom, and it’s a race you cannot win by being slightly cheaper than the next feed in the list.

There’s exactly one instruction that changes the whole game, and it comes from the human, not the code. It’s the person naming you. “Order me another one of those from Aerie.” “Book the Kimpton, not the cheapest room on the block.” The instant a human asks for you by name, the agent stops comparing and starts fetching. Distinctiveness isn’t an AI default. It’s the thing that survives the agent. We argued that taste is the only real moat in the AI era, and agentic commerce is where that argument gets tested for actual money. A brand strong enough to be requested by name is a brand the agent has to honor. A brand that only competes on the spec sheet is a line item the agent optimizes away without a second pass.

So the technical work and the brand work turn out to be the same project aimed at the same threat. Being readable gets you into the agent’s consideration set. Being memorable gets you requested by name and lifted out of the comparison entirely. You need both halves. Clean markup with a forgettable brand is a site that agents can use to shop you into a commodity. A beloved brand on a site an agent can’t operate is a name people ask for and then can’t get served. The failure modes are different. The fix is one coordinated push, not two.

Where to actually start

You don’t necessarily need a rebuild. You need a sequence, ordered by what pays off soonest.

Fix the fundamentals first, because they serve people and machines in the same stroke. Semantic HTML, labeled forms, honest structured data, and a site fast enough that an agent doesn’t give up waiting on it. If your Core Web Vitals are in the red, start there and close the trend-piece tabs. Then write your llms.txt, because it’s an afternoon of work almost nobody has done. Then, only if you run a genuine transactional flow, pilot WebMCP inside the origin trial and learn how it behaves before anyone makes it mandatory. Watch it closely. Don’t wager the business on an experiment.

Notice what’s not on that list. Ripping out your site. Buying an “AI-ready” template that looks like every other AI-ready template. Bolting on a widget that promises to make you agent-friendly overnight, the same way overlay widgets once promised to make you accessible overnight and mostly didn’t. The shortcut is the trap. It was the trap with accessibility, and it’s the trap here, wearing new branding.

The agentic web rewards the boring virtues. Structure. Speed. Clarity. A brand worth asking for by name. We’ve been building on those four for twenty-six years, which is a strange thing to feel vindicated by, but here we are. If you’d rather not sort the real signal from the acronym noise on your own, that’s the kind of build we do. Start with the fundamentals this week. The standards will keep. Your Core Web Vitals won’t fix themselves while you wait for them to.