The new era of AI buyers. Amazon locks agents out. For small retailers it's the wrong strategy
AI agents now shop on behalf of people. They search for products, compare prices and delivery times, check availability, and some even add items to the cart. Amazon and eBay responded by shutting the door. For Amazon, I think that's the right call. For an independent shop, it's a mistake that's surprisingly easy to copy.
According to Semafor, Amazon restricts outside shopping agents and builds its own AI tools. eBay limits automated access to protect its trading ecosystem. Shopify does the opposite: it's building integrations that let merchants connect their catalogs and purchases to outside AI platforms, including ChatGPT and Copilot.
A marketplace lives on control over the buyer, the ad placements and the checkout. An agent that compares offers without ever looking at a banner attacks exactly that. So Amazon's defense isn't a reflex. It's math, and the math works for Amazon.
Yours doesn't. You have no ad business to protect. You have a discoverability problem. An agent that can't cleanly read your prices and delivery times skips you, and the customer never finds out you existed.
What's already happening
Shopify reports that in the first quarter of 2026, traffic from AI search was eight times higher than a year earlier, and orders almost 13 times higher. New customers coming through AI channels order almost twice as often. The base is probably still small. But a channel where orders grow faster than traffic is not a toy.
DataDome counted 12.5 million requests from agent browsers in August and 58.2 million in September. CHEQ saw agent traffic in its observed network grow a hundredfold in 45 days, driven by new consumer agents such as Meta Muse. Salesforce expects about 20% of e-commerce traffic in the 2026 holiday season to be tied to AI agents (shopping assistants, automated operations and price monitoring). The season is only a few weeks away.
Blocking is not an answer
Agents don't just read. Of Meta Muse's requests, 8.9% touched forms, login, carts, payment and account creation. Out of 29.1 million requests in the first twelve days, that works out to a bit over 2.5 million actions. Both simple answers fail here. Block everything and you also block the agent that's about to place an order for a customer. Let everything through and you open your account and payment forms to every bot.
So your shop has to learn to tell authorized shopping agents from harmful bots. That's a product decision, not just an IT task: who gets to do what?
What I'd put on the roadmap
CHEQ describes what a shop needs for this:
- machine-readable prices, attributes, availability, delivery options and variants
- controlled interfaces for current data
- caching and request rate limits so agents don't overrun the servers
- rules that separate authorized agents from bots
- analytics that count people, AI referrals and direct agent access separately
There's a second front on top of that: your own AI advisor in the shop, helping customers choose. If you prepare your catalog for outside agents, you've already done half the work for your own advisor.
Human Commerce isn't going away. Your shop still needs good design and a checkout people like. But a second channel is forming next to it, and it has different readers.
Amazon can afford to lock agents out. You can't afford to be invisible. This week, open your ten best-selling products and ask your development team whether the logs show which requests come from agents. If the answer is "no", that's your first job before the holiday season.