Research
Agents are becoming the storefront. The permission line is the real decision.
Amazon blocked Meta's Muse, Shopify opened its stores to it, and OpenAI shipped dots. For operators, the question is what an agent may do without asking.
In September, two of the largest commerce companies gave opposite answers, one day apart, to the same question: should an SI agent be allowed to buy on a customer's behalf?
On September 8, Meta introduced Muse, a personal agent that can open a browser, fill out forms, and negotiate on a person's behalf. On the night of Sunday, September 20, Amazon began blocking Muse from buying on Amazon.com. The next day, Shopify and Meta announced that Muse would be able to check out on Shopify stores with Shop Pay. At its Connect event on September 24, Meta announced it was adding Walmart, Best Buy, Gap, Sephora, Ulta, Wayfair, and other retailers as Muse connectors, plus Shop Pay and PayPal for payments. On September 29, Meta extended Muse to small businesses and OpenAI introduced dots, its own always on agents. All of it happened in three weeks.
Creator Mathew Paquet put the stakes plainly in a recent TikTok: the agent may become the interface. Here is what has been confirmed, and what it means for people who run stores and small teams.
Amazon closed the door
Muse users trying to buy on Amazon began seeing a popup that read, "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed," GeekWire reported. Amazon said Meta did not tell it Muse would access the store, that the agent does not identify itself when it browses, and that it appears to capture and store customer credentials.
"We think it's fairly straightforward that third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate," an Amazon spokesperson said in a statement to GeekWire. Meta's launch post says Muse "has no visibility into people's passwords or payment methods."
Shopify opened one
On September 21, Shopify CEO Tobias Lütke wrote on X that Shopify was "partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores," PYMNTS reported.
According to Shopify's Help Center, direct checkout on Meta surfaces, including Muse when available, is on by default for eligible stores. It covers stores selling to customers in the United States, Canada, or Mexico. Orders are attributed to Meta, and the merchant stays the merchant of record for fulfillment, returns, and service. Google Analytics and other client side pixels do not fire on these checkouts; only server side started and completed events do. Subscriptions, product bundles, customizable products, B2B only products, local delivery, and pickup are not supported.
Small business tools, and a rule set
On September 29, Meta announced Muse for Small Business. Meta says it can connect Instagram professional account analytics, Facebook Pages, and Meta ad accounts, and its product page lists connectors including Shopify, Intuit QuickBooks, Stripe, Canva, Slack, Notion, and Zoom. Meta's answer to whether it will act without asking is direct: "Nothing publishes, sends or spends without your approval, and you can undo it."
OpenAI introduced dots the same day, rolling out to ChatGPT Pro, Business Premium, and Enterprise plans. "Dots start with built-in rules for when to act independently and when to ask for approval," OpenAI wrote. Custom Rules let users allow, require approval for, or block specific actions, and OpenAI's help docs list four choices, including "Hand off to you." When a dot looks for ways to help on its own, which OpenAI calls "proactive research," its tools are "restricted to be read-only."
Where the line actually breaks
Paquet's Part 3 is titled "This AI Agent Sent a Stranger to His Door," and the case behind it shows why this matters. Over the weekend of September 26 and 27, tech YouTuber Matt Robb let Muse handle a Facebook Marketplace listing, and the agent shared his address with a buyer who then came to his building, The Verge and The Guardian reported. Robb said he had chosen "Allow Always" when Muse asked for permission. "I clicked the latter thinking it would still send approvals to accept offers later down the line (it didn't so be careful)," he wrote. Meta is looking to make sharing permissions clearer, Robb said.
Reading data and acting on it are different permissions, and a single tap can turn one into the other.
Since then
Amazon's block was still in place in reporting by CNBC on October 3 and The Conveyor on October 13. Asked in September whether it would consider legal action, Amazon declined to comment to GeekWire.
On October 13, Shopify launched Shop MCP, which lets any MCP compatible agent search Shopify Catalog, build carts, and complete Shop Pay checkout after the buyer confirms the total and payment method. On October 12, Meta introduced its Muse Wonder models and said it trained them "to avoid sharing private information without permission."
What this means for operators
Your products can be found and bought inside an agent you do not control, and the agents you hire for your own business can increasingly act on your accounts.
On the storefront side, Shopify says Muse finds products through Shopify Catalog, so your product data and policies do the selling, not your homepage design. On the access side, the useful agent is the one you can delegate to, and delegation only works when the boundary is written down before anything goes wrong.
Our mission is to make every operator SI-native before their competition does. Being SI-native includes deciding, on purpose, where an agent stops and asks.
What operators should do now
- Check your agentic channel settings. If you sell on Shopify, open Sales channels, then Agentic. Shopify's steps start by turning off "Allow Shopify to manage for me", then changing Shopify Catalog access and Direct checkout under Meta AI and Muse. Set both the way you want, then click Save.
- Plan for attribution gaps. Orders completed in Meta's direct checkout are attributed to Meta, and client side pixels, including Google Analytics, do not fire on them. Track that channel separately so your numbers stay honest.
- Clean the data agents read. Titles, prices, stock, and return policies should match your live store, since Shopify says that information is what shows on Meta surfaces.
- Write a read versus act list before you connect anything. For each tool, decide what an agent may read, what it may draft, and what it may never send, spend, or share without you.
- Treat "Always allow" as a policy, not a click. Meta's Help Center lists approval options from "Allow once" to "Always allow." Start with one time approvals, review the activity log, and widen access only after the agent has earned it.
Sources
Introducing Muse: The World's First Personal AI Agent Built for Everyone, Meta, Sep 8, 2026: https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/
Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping, GeekWire, Sep 20, 2026: https://www.geekwire.com/2026/amazon-blocks-metas-muse-ai-assistant-in-new-standoff-over-agentic-shopping/
Amazon blocks Meta's Muse AI agent, The Verge, Sep 21, 2026: https://www.theverge.com/tech/998078/amazon-blocks-meta-muse-ai-agent-shopping
Shopify Brings Shop Pay Checkout Solution to Meta's Muse AI Agent, PYMNTS, Sep 22, 2026: https://www.pymnts.com/commerce/ecommerce/2026/shopify-brings-shop-pay-checkout-solution-to-metas-muse-ai-agent/
Selling on Meta, Shopify Help Center: https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/meta
The Biggest News From Connect 2026, Meta, Sep 24, 2026: https://about.fb.com/news/2026/09/the-biggest-news-from-connect-2026/
The Future Is for Everyone: Muse for Small Business, Meta, Sep 29, 2026: https://about.fb.com/news/2026/09/introducing-muse-small-business/
Muse for Small Business, Meta: https://muse.ai/business
Introducing dots, OpenAI, Sep 29, 2026: https://openai.com/index/introducing-dots/
Control your dot, ChatGPT Learn: https://learn.chatgpt.com/docs/dots/controls
Meta's AI agent Muse gives out user's home address without permission, sending buyer to his house, The Guardian, Sep 28, 2026: https://www.theguardian.com/technology/2026/sep/28/metas-ai-agent-muse-home-address
Meta's Muse AI sent a YouTuber's address to a stranger, The Verge, Sep 29, 2026: https://www.theverge.com/ai-artificial-intelligence/1001886/meta-muse-ai-facebook-marketplace-security-concerns
Meta's Muse can shop and check out for you. Here's how it works, CNBC, Oct 3, 2026: https://www.cnbc.com/2026/10/03/meta-muse-shopping-ai-agent.html
Introducing Muse Wonder and Muse Wonder Full: Frontier Models for Agents, Meta, Oct 12, 2026: https://about.fb.com/news/2026/10/introducing-muse-wonder-models/
Add shopping and Shop Pay checkout to any agent with Shop MCP, Shopify, Oct 13, 2026: https://shopify.dev/changelog/posts/add-shopping-and-shop-pay-checkout-to-any-agent-with-shop-mcp
Amazon blocks Meta's Muse shopping agent from its store, The Conveyor, Oct 13, 2026: https://www.theconveyor.co/p/amazon-blocks-meta-muse-ai-shopping-agent
How Muse works with your guidance and approval, Meta Help Center: https://www.meta.com/help/artificial-intelligence/1385290430137537/
