Amazon just showed that your AI agent works only where the platform allows it

Forbes reported on Monday that Amazon began denying Meta's Muse agent access to Amazon.com on Sunday, serving shoppers a popup instead of a checkout: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed." Meta launched Muse on Sept. 8 as a personal agent that opens a browser, fills out forms and completes purchases. Amazon says Meta never disclosed that Muse would shop the store, that the agent does not identify itself when it browses, and that it captures and stores customer logins. Meta's launch post says Muse has no visibility into passwords or payment methods. Thirteen days from launch to lockout.

The block came through the account, not the courtroom

Amazon already tried the legal route. It sued Perplexity over Comet in November, and in March a federal judge barred that agent from the password-protected parts of Amazon's site. On Aug. 4 a federal appeals court threw the order out, reasoning that when an agent follows a shopper's instruction, the shopper is the one using Amazon and the software only does what it was told. The suit continues; the order keeping Comet out is gone.

So Amazon changed the argument. If the courts say the shopper is the user, then the shopper's own agreement is the lever. Amazon is not accusing the agent of breaking in. It is telling its customers they agreed not to do this.

That is the part worth sitting with. Your automation does not run on neutral ground. It runs on an account you do not own, under terms you clicked through, revocable at the counterparty's discretion and without a hearing.

The economics explain the speed. Amazon's own Alexa for Shopping replaced Rufus in May and handles purchases through Buy for Me. On the July earnings call, Andy Jassy said more than 350 million shoppers used it over the past 12 months, and that U.S. customers who use it spend 40% more per order on average. The assistant standing between a shopper and the checkout makes every order bigger. Amazon is not going to rent that seat to Meta.

Meta plays the same hand on its own turf

This is not Amazon being uniquely hostile. Meta changed WhatsApp's business terms last October to bar general-purpose AI chatbots — ChatGPT and Perplexity's among them — from the service businesses use to message customers, effective Jan. 15. Meta says its own Business Agent is used by more than 1 million businesses on WhatsApp and Messenger.

Every large platform is running the identical policy: my agent inside my walls, yours outside. Forbes counted Amazon, Meta, OpenAI, Google and Perplexity all shipping agents that can shop. Far fewer own the account those agents must sign into.

Standardisation is coming, and it will not loosen the grip. On Sept. 10, Visa, Mastercard and Ant International said they are working on common rules so payment networks, merchants and marketplaces can recognise an agent, see who runs it and check whether it is allowed to spend. Identification is the gate. Gates have owners.

Your Next Move

Audit which of your workflows depend on someone else's terms of service. List every automation you run that logs into a platform you do not control — retail, CRM, social, email. Beside each, write what happens to your week if it stops on Sunday with no notice. That list is your actual exposure, and most operators have never written it down.

Keep the judgment outside the tool. The durable asset is the decision rule — what you buy, from whom, at what threshold, and why. Store that in your own documentation, not inside a vendor's agent. When the agent is blocked, you should lose execution speed, not the logic.

Read the Conditions of Use on the two platforms you depend on most. Amazon enforced a clause its customers had already accepted. Assume the clause that ends your workflow is already signed, and find it before it is invoked.