Why Amazon Blocked Meta Muse, and What It Means for AI Agents

Key takeaways

• Amazon blocks Meta Muse from shopping on Amazon.com and shows Muse users a notice that an “unauthorized AI agent” violates Amazon’s Conditions of Use.

• Amazon says Muse doesn’t disclose that it’s automated and appears to capture customers’ login credentials, while Meta says Muse never sees the passwords or payment methods it uses.

• Amazon asked Meta to remove Amazon from Muse, and Meta declined, according to Bloomberg.

• Amazon has also restricted shopping agents from OpenAI, Google and Perplexity, though a federal appeals court lifted its injunction against Perplexity in August 2026.

• Agent identity sits at the center of the dispute: a store can’t verify that an agent is an agent, who stands behind it or what they approved, and standards such as Web Bot Auth are designed to answer those questions.

Amazon blocks Meta Muse because, Amazon says, the agent shops without identifying itself as automated, handles customers’ credentials and never got Amazon’s agreement to operate there. Meta disputes the credential claim and declined Amazon’s request to drop Amazon from Muse. The standoff also exposes a wider gap, since most stores can’t yet verify who an AI agent acts for.

An agent that can prove who’s behind it

Alien Agent is a private personal AI agent that acts for you while your data stays encrypted and out of anyone else’s reach. It carries its own Agent ID, linked to your verified Alien ID, so it can prove a real, verified person stands behind it. Learn how Alien Agent works

Why did Amazon block Meta Muse?

Amazon blocked Meta Muse because it says the agent operates on Amazon.com without permission and without identifying itself. Amazon started blocking Muse on the evening of September 20, 2026, shortly after Meta launched its personal AI agent, Muse, GeekWire reported.

Muse users who try to shop on Amazon now see this notice: “Continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, to which our customers have agreed.” Amazon told GeekWire that third-party shopping agents “should operate openly and respect service provider decisions about whether or not to participate.”

Amazon’s complaints, as Campaign reported, are:

• Meta didn’t tell Amazon that Muse would operate on its store.

• Muse doesn’t disclose that it’s automated or that Meta is involved.

• Muse appears to capture and store customers’ login credentials.

• Muse bypasses Amazon’s personalization features.

What Meta says

Meta’s public position is that Muse never sees the passwords or payment methods it uses. Meta’s launch announcement says credentials go into secure storage “so Muse can use them without seeing them.” Meta’s security post adds that the agent works with stand-in tokens, and a separate component swaps in the real credential only at the network boundary.

Meta’s account contradicts part of Amazon’s claim about credentials. Before blocking Muse, Amazon asked Meta to remove Amazon from the Muse experience, and Meta refused, Bloomberg reported. As of October 2, 2026, we found no further public statement from Meta on the block itself.

Can Meta Muse still shop on Amazon?

Meta Muse can’t complete purchases on Amazon.com as of October 2, 2026, and users who try see Amazon’s “unauthorized AI agent” notice instead. Muse works with other retailers, which CNN lists as including Walmart, GameStop, Sephora, Expedia, OpenTable and Shopify.

When Muse buys something, it pays through Stripe’s Link, which uses single-use card numbers, Quartz reported. Meta’s security post says Muse asks you to approve every purchase, with the exact details shown. The full process is in how shopping with Meta Muse works.

How shopping through an AI agent looks from the store’s side

From the store’s side, a Meta Muse purchase looks like a customer logged in to their own account, because Muse uses that customer’s session. The store sees the login, the cart and the order. It doesn’t get a verifiable signal that software is placing the order, which company built that software, or what the customer approved. Amazon hasn’t said how it detects Muse traffic.

A store sees a logged-in customer; it can’t verify the agent, the person behind it or what they approved. Sources: Amazon statements via GeekWire and Campaign, Meta AI blog.

Amazon’s call for agents to operate “openly” points at the same gap.

Other AI agents Amazon has blocked

Amazon has restricted several AI shopping agents, and Muse is the latest. Amazon limited agents from OpenAI through robots.txt, TechRadar reported in November 2025, and did the same to Google’s shopping agents, according to TipRanks, citing The Information. TechSpot reports that Amazon is “actively working to block other third-party agents, such as those from Google and OpenAI.”

Amazon also sued Perplexity over its Comet shopping agent and won a preliminary injunction in March 2026. On August 4, 2026, the U.S. Court of Appeals for the Ninth Circuit vacated that injunction, finding Amazon was unlikely to prove that Comet, a tool running on the user’s device, “accessed” Amazon under the federal anti-hacking law, according to law firm Pearl Cohen. The case went back to the lower court. Pearl Cohen’s reading is that terms of service, not anti-hacking law, are likely to become stores’ main tool against agents, which matches the wording of Amazon’s notice to Muse users.

Critics point to other motives. Search Engine Watch notes that agents skip the product pages where Amazon sells ads. Amazon runs its own agent, Buy for Me, which it says identifies itself and lets brands opt out, according to GeekWire, while TechTimes argues that brands were added without asking first.

Three questions every platform asks an AI agent

Every platform deciding whether to let an AI agent in needs answers to three questions: is this an agent, who stands behind it, and did the platform agree to it? We call these Alien’s agent identity questions, and the table maps the Amazon and Meta dispute onto them:

Sources: GeekWire, Campaign, Bloomberg, Meta Newsroom, Meta AI blog. Checked October 2, 2026.

Meta’s approvals happen inside Muse, where only the user sees them, so none of that proof reaches Amazon. The same gap showed up on Facebook Marketplace, where a buyer didn’t know he was talking to Muse rather than the seller.

“From Amazon’s side, a Muse session looks like a customer who suddenly shops like software. If you can’t tell who’s behind that, blocking it is the rational call. The Perplexity ruling pushes stores toward their terms of service, so I expect the blocks to keep coming until agents can prove who authorized them.”

— Kirill Avery, founder of Alien

Standards that let AI agents prove who they are

Several standards, most still in development, are designed to let an AI agent prove its identity to a website instead of acting inside a user’s session without a label. They answer different parts of the three questions above:

• Web Bot Auth lets agents sign their web requests so a site can verify which agent sent them, and Cloudflare validates those signatures for sites that use it, according to Cloudflare. The FAQ below has more.

• Visa Trusted Agent Protocol lets a merchant “verify that an agent is legitimate and has the user’s permission to act,” according to Visa, which describes it as still in development and deployment. Cloudflare says it builds on Web Bot Auth.

• Mastercard Agent Pay also uses signed requests to verify agents and tie them to payment authorization, per Cloudflare.

• Universal Commerce Protocol, which Google developed with retailers including Shopify, Etsy, Wayfair, Target and Walmart, lets agents work across the buying process, from discovery to post-purchase support, TechCrunch reported.

Web Bot Auth and the payment protocols tell a store which agent is calling and whether a card network vouches for it. Alien’s open-source Agent ID, still in alpha, takes a similar approach to the “who stands behind it” question: an agent gets its own cryptographic key, its owner links it to their Alien ID by scanning a QR code in the Alien app, and a service that checks the agent can confirm a real, verified person stands behind its requests “without revealing who that person is,” according to Alien. Alien ID itself is an anonymous proof that someone is a unique human, and services see the proof only if they check for it.

Meta hasn’t said publicly whether Muse signs its requests under any of these standards. A deeper look at the methods is in how AI agent authentication works.

What it means for Meta Muse users

For Meta Muse users, the block means Amazon orders have to happen outside Muse for now. Amazon’s notice points to the Conditions of Use that Amazon customers accept, so Amazon frames the issue as part of the customer’s own agreement with the store. If you’re weighing what else to connect, read how Meta Muse handles your logins and data.

Bottom line: why Amazon blocked Meta Muse

Amazon says it blocked Meta Muse because the agent doesn’t identify itself and Amazon never agreed to it, while Meta says its design keeps credentials safe. Both positions leave the same gap: the store has no proof of who the agent is or what the person behind it approved. Signed requests and agent identities linked to verified people are designed to close that gap. If agent identity matters to you, look at alternatives to Meta Muse with this question in mind.

How Alien handles agent identity

The second question in the table, who stands behind an agent, has a direct answer when the agent is tied to a verified person. Alien Agent is a private personal AI agent that logs into the services you already use and gets things done for you. Your data is encrypted with your own key and processed in secure hardware that Alien itself can’t access, your passwords stay in a vault the agent never sees, and it only does what you’ve given it permission to do. It carries its own Agent ID, linked to your verified Alien ID, so it can prove to services that check it that a real, verified person stands behind it, without revealing who you are. Alien Agent is in closed testing, with access by invite code.

Sources

1. Amazon Blocks Meta’s Muse AI Agent From Its Retail Site, Bloomberg, September 21, 2026.

2. Amazon blocks Meta’s Muse AI assistant in new standoff over agentic shopping, GeekWire, September 21, 2026.

3. Amazon blocks Meta’s Muse from shopping on its platform, Campaign, September 23, 2026.

4. Amazon is blocking Meta’s shopping AI agent, and plans to block Google and OpenAI’s too, TechSpot, September 25, 2026.

5. AI agents promise to do everything for you. There may be a big wrinkle in that plan, CNN, September 28, 2026.

6. Introducing Muse: The World’s First Personal AI Agent Built for Everyone, Meta Newsroom, September 8, 2026.

7. How We Built Safety Into Muse, Meta AI, September 8, 2026.

8. Amazon blocks Meta’s Muse AI agent from shopping on its site, Quartz via Yahoo Finance, September 21, 2026.

9. Ninth Circuit Vacates Injunction Against Perplexity’s AI Shopping Agent, Pearl Cohen, August 31, 2026.

10. Securing agentic commerce: helping AI Agents transact with Visa and Mastercard, Cloudflare, October 24, 2025.

11. Trusted Agent Protocol, Visa Developer, accessed October 2, 2026.

12. Google announces a new protocol to facilitate commerce using AI agents, TechCrunch, January 11, 2026.

13. Web Bot Auth working group charter, IETF, accessed October 2, 2026.

14. Alien Agent ID, Alien, accessed October 2, 2026.

15. Amazon blocks ChatGPT’s new shopping agent – what the fallout could mean for you, TechRadar, November 27, 2025.

16. Amazon (AMZN) Blocks Google’s AI Shopping Agents from Its E-Commerce Platform, TipRanks, July 31, 2025.

17. Why Amazon is blocking Meta’s Muse shopping agent, Search Engine Watch, September 22, 2026.

18. Amazon Blocks Meta Muse Using Standards It Ignores for Its Own Shopping Agent, Tech Times, September 23, 2026.

About the author

Kirill Avery is the founder of Alien AI Agent, a personal AI agent built around privacy and verified identity. He started building with machine learning at 12, became the youngest developer at VK at 14, and went through Y Combinator. · Author page · X · LinkedIn · Editorial policy