Why Websites Are Blocking AI Shopping Agents
Security concerns and commercial interests drive websites to restrict automated AI shopping assistants.
1The AI Agent Friction
Personal AI agents like Meta’s Muse aim to automate tasks like grocery shopping and travel booking. However, these tools frequently encounter human-verification prompts like CAPTCHA. While some blocks are intentional, others stem from security systems that struggle to distinguish between helpful user-authorized agents and malicious automated traffic, causing failed task completion.
2Amazon and Retail Restrictions
Amazon has taken a direct approach by deliberately blocking shopping agents from its platform. The retailer argues that these tools violate access rules and jeopardize customer data security. This conflict extends to Perplexity’s Comet AI browser, where a federal appeals court vacated a preliminary injunction in August 2026, leaving the dispute unresolved.
3Financial Security Risks
JPMorgan Chase CFO Jeremy Barnum highlighted severe risks during an October earnings call regarding AI agents. He noted that some agents utilize shared login credentials and screen scraping for fund transfers, which the bank deems insecure. Consequently, the bank actively blocks these methods to prevent unauthorized actions and potential financial liability for customers.
4Commercial Control Mechanisms
Businesses are increasingly asserting control over automated access for commercial reasons. eBay’s user agreement explicitly prohibits unauthorized buy-for-me agents without prior permission. Similarly, Delta has clarified that it lacks integrations for third-party agents to book flights, demonstrating how major service providers maintain strict oversight over their digital storefronts and booking processes.
5Unintended Blocking Consequences
Not all agent blocks are deliberate bans. Walmart’s experience with Meta’s Muse shows that verification checks can accidentally interrupt automated sessions. Zillow has also acknowledged that its anti-scraping defenses sometimes flag permitted agents. For users, these technical hurdles manifest as an assistant that simply fails to complete the requested shopping task.
6The VPN Traffic Parallel
The current struggle mirrors the routine challenges faced by VPN users. When traffic from shared networks resembles automated activity, it triggers reCAPTCHA challenges. AI agents encounter similar obstacles while navigating websites, even when acting under direct user instructions. Switching to a VPN does not override these site-specific restrictions on automated web access.
7Cloudflare’s New Control Rules
Cloudflare has introduced granular controls allowing website owners to distinguish between search crawlers, AI training bots, and user-authorized agents. Since September 15, new domains default to blocking AI agents on ad-supported pages. This allows site owners to permit search indexing while simultaneously restricting automated agents that might interfere with their specific business models.
8Future of Managed Access
Platforms like Shopify are exploring more controlled integration methods for browser agents. Their checkout tools allow agents to update details and submit orders only after explicit buyer confirmation, returning control to shoppers for authentication. This approach suggests a potential path forward where security and automation coexist through structured, platform-approved API access protocols.
Original article: Engadget — Why Websites Are Blocking AI Shopping Agents