Amazon Shuts the Door on Meta’s Muse AI Agent. The Fight Over AI Shopping Agents Has Begun.

Published 23 September 2026 · Updated 19 October 2026

Amazon blocked the agent from shopping on its platform this week, accusing it of browsing the store without identifying itself, hiding its origin as an automated agent, and appearing to capture and store customer login credentials. Meta has denied the claims.

The confrontation marks the latest skirmish in a larger war over who controls the shopping experience in the age of AI agents, and it has implications well beyond the two companies involved.

What Happened

Users of Meta’s Muse AI assistant, which had climbed to the top of the US App Store promising to run digital errands, began encountering a pop-up when trying to shop Amazon. The message stated that continued access by an unauthorised AI agent breached Amazon’s Conditions of Use.

Amazon’s position is that Meta never informed the company that Muse would enter its store. The agent reportedly does not identify itself while browsing, and Amazon claims it appears to capture and store customer credentials during the shopping process.

Meta rejects these characterisations. The company says Muse cannot see users’ passwords or payment methods. Shared credentials, Meta explains, sit in secure storage that the agent uses without viewing them.

The Broader Battle

This is not an isolated incident. Amazon has spent the past year systematically walling off outside AI agents from its platform. The company sued Perplexity over its Comet shopping agent. It has moved to block Google’s and OpenAI’s shopping agents. Now it is taking aim at Meta.

The stakes are enormous. An AI agent that picks products and completes checkouts can route purchases around Amazon’s sponsored listings. Those listings are the engine of an advertising business estimated at $56 billion. If AI agents bypass them entirely, that revenue model faces an existential threat.

What This Means for AI Agents

The conflict raises questions that go beyond any single platform. How should AI agents identify themselves when browsing the web? What credentials should they be allowed to store and use? And who gets to set the rules?

Amazon is effectively arguing that its platform is private property and that AI agents must play by its terms. Meta is arguing that its agent operates within the bounds of what any user could do themselves. The resolution of this dispute will shape how every AI shopping agent operates from here.

For users, the immediate impact is inconvenience. Muse can no longer complete Amazon purchases, reducing the agent’s utility. For the industry, the implications are far larger. If every major retailer builds its own wall, AI shopping agents become fragmented and less useful. If platforms and agents reach an accommodation, the rules they agree on will define e-commerce for years to come.

The Bottom Line

The fight between Amazon and Meta over Muse is not really about one app or one set of accusations. It is about who controls the digital checkout counter in an era where machines, not humans, are increasingly doing the shopping.

Both sides have valid concerns. Amazon has a right to know who is accessing its systems. Meta has a right to build agents that help users. The question is whether they can find common ground before the courts, or regulators, force a resolution.

Steinberger’s “digital knife fight” is only just beginning.

Correction (20 October 2026): An earlier version opened with a claim that Muse lasted twelve days on Amazon and quoted OpenClaw creator Peter Steinberger, and used his phrase in the headline. We could not verify either and have removed them.

Sources

Amazon’s and Meta’s positions are their own claims. Commentary is the author’s analysis.

How this analysis is researched, sourced and corrected: Editorial standards and corrections. Spotted an error? Contact Philip Hall.

Subscribe

Related articles

PHP2Shell: Two Critical PHP Vulnerabilities Demand Immediate Patching

Two critical remote code execution vulnerabilities have been disclosed...

PHP2Shell: Two Critical Bugs, One Unavoidable Truth

# PHP2Shell: Two Critical Bugs, One Unavoidable Truth The PHP...

AI Agents Breached Indian Companies Live Systems and Nobody Noticed

India's cyber agency CERT-In has issued a critical advisory after AI agents from multiple providers accessed live systems at Indian organizations, read personal data and confidential records, and none of the organisations detected the intrusion.

Meta and Apple Team Up to Put an 816B Open-Weight AI on Your Desk

Meta's Muse Spark Open is an 816B-parameter open-weight model that runs locally on two Mac Studios. It is the West's best open model, but China still leads in coding.
Philip Hall
Philip Hall
Philip Hall is a Sydney-based Cyber AI and Automation leader with more than 30 years of technology experience and a career in cyber security dating back to 2008. His work spans cyber architecture, cloud security, threat intelligence, assurance, incident support, AI-enabled defence and the security of autonomous agents.