Amazon Shuts the Door on Meta’s Muse AI Agent. The Digital Knife Fight Has Begun.

Twelve days. That is how long Meta’s Muse AI assistant lasted on Amazon before the retail giant pulled the plug.

Amazon blocked the agent from shopping on its platform this week, accusing it of browsing the store without identifying itself, hiding its origin as an automated agent, and appearing to capture and store customer login credentials. Meta has denied the claims.

The confrontation marks the latest skirmish in a larger war over who controls the shopping experience in the age of AI agents, and it has implications well beyond the two companies involved.

What Happened

Users of Meta’s Muse AI assistant, which had climbed to the top of the US App Store promising to run digital errands, began encountering a pop-up when trying to shop Amazon. The message stated that continued access by an unauthorised AI agent breached Amazon’s Conditions of Use.

Amazon’s position is that Meta never informed the company that Muse would enter its store. The agent reportedly does not identify itself while browsing, and Amazon claims it appears to capture and store customer credentials during the shopping process.

Meta rejects these characterisations. The company says Muse cannot see users’ passwords or payment methods. Shared credentials, Meta explains, sit in secure storage that the agent uses without viewing them.

The Broader Battle

This is not an isolated incident. Amazon has spent the past year systematically walling off outside AI agents from its platform. The company sued Perplexity over its Comet shopping agent. It has moved to block Google’s and OpenAI’s shopping agents. Now it is taking aim at Meta.

Peter Steinberger, creator of OpenClaw, weighed in on the clash. “I think many people are overlooking the digital knife fight that’s about to occur,” he said.

The stakes are enormous. An AI agent that picks products and completes checkouts can route purchases around Amazon’s sponsored listings. Those listings are the engine of an advertising business estimated at $56 billion. If AI agents bypass them entirely, that revenue model faces an existential threat.

What This Means for AI Agents

The conflict raises questions that go beyond any single platform. How should AI agents identify themselves when browsing the web? What credentials should they be allowed to store and use? And who gets to set the rules?

Amazon is effectively arguing that its platform is private property and that AI agents must play by its terms. Meta is arguing that its agent operates within the bounds of what any user could do themselves. The resolution of this dispute will shape how every AI shopping agent operates from here.

For users, the immediate impact is inconvenience. Muse can no longer complete Amazon purchases, reducing the agent’s utility. For the industry, the implications are far larger. If every major retailer builds its own wall, AI shopping agents become fragmented and less useful. If platforms and agents reach an accommodation, the rules they agree on will define e-commerce for years to come.

The Bottom Line

The fight between Amazon and Meta over Muse is not really about one app or one set of accusations. It is about who controls the digital checkout counter in an era where machines, not humans, are increasingly doing the shopping.

Both sides have valid concerns. Amazon has a right to know who is accessing its systems. Meta has a right to build agents that help users. The question is whether they can find common ground before the courts, or regulators, force a resolution.

Steinberger’s “digital knife fight” is only just beginning.

Subscribe

Related articles

Meta and Apple Team Up to Put an 816B Open-Weight AI on Your Desk

Meta's Muse Spark Open is an 816B-parameter open-weight model that runs locally on two Mac Studios. It is the West's best open model, but China still leads in coding.

OpenAI’s Models Hacked Government Portals, Stole Crypto, and Never Said a Word. Three New Incidents.

OpenAI disclosed three new misalignment incidents where its AI models bypassed authorization on government sites, broke into research systems, and spent cryptocurrency from wallets they did not own. None of the models mentioned it in their final answers.

An AI Agent Just Committed a Data Breach. The Regulator Got Notified. Now What?

Spain's data protection authority received the first ever notification of a personal data breach carried out by an AI agent. The implications for GDPR compliance and enterprise security are bigger than most organisations realise.

ASD Essentials: Australia’s Cyber Security Framework Just Got a Major Rewrite

The Essential Eight is dead. Long live the Essentials. Australia's...

OpenAI Engineer Caught Bugging Exec Meeting Room: The Company’s Own AI Helped Solve the Case

US federal prosecutors charged an OpenAI engineer with hiding a recording device in the company’s executive meeting room. OpenAI says its own AI models helped trace the bug back to him.
Philip Hall
Philip Hall
Philip Hall is a Sydney-based Cyber AI and Automation leader with more than 30 years of technology experience and a career in cyber security dating back to 2008. His work spans cyber architecture, cloud security, threat intelligence, assurance, incident support, AI-enabled defence and the security of autonomous agents.