Amazon says it blocked Meta's Muse AI agent from accessing Amazon.com to shop on users' behalf, citing ToS violations, security risks, and no merchant consent

Third-party AI agents can no longer browse Amazon to shop for you without the merchant's explicit consent.

Amazon has blocked Meta's AI agent, Muse, from accessing Amazon.com to perform shopping tasks on behalf of users. The e-commerce giant cited violations of its Conditions of Use, security risks, and a lack of consent from merchants. Amazon stated that Muse does not identify itself when browsing and may capture and store customer credentials, posing privacy and security threats. Muse users attempting to shop on Amazon were met with a message stating that unauthorized AI agent access violates Amazon's Conditions of Use. This action occurs despite a previous multibillion-dollar deal for Meta to run AI workloads on Amazon's cloud and existing partnerships where Amazon products are sold on Meta platforms. Amazon has previously taken similar actions against other AI shopping agents, including suing Perplexity and blocking agents from Google and OpenAI.

This standoff highlights a critical tension in the burgeoning market for AI agents: the control of the customer relationship and online shopping experience. Amazon's stance suggests a strong desire to maintain its direct connection with consumers and protect its lucrative advertising business, which relies on user browsing data. By blocking Muse, Amazon is asserting its right to dictate how AI interacts with its platform and customers, setting a precedent for how other e-commerce sites might handle similar AI integrations. This move could lead to increased scrutiny and potential regulation of AI agents that operate across multiple online services.

The incident underscores the technical and ethical challenges of agentic commerce, particularly concerning data privacy, security, and transparency. While Meta claims Muse does not expose user credentials, Amazon's concerns about unauthorized access and potential credential harvesting are significant. This conflict may accelerate the development of standardized protocols for AI agent authentication and authorization, similar to how APIs are managed today. Companies will need to find ways to balance the convenience of AI-powered shopping with the need for robust security and user consent, potentially leading to new business models for AI agent services and e-commerce platforms.