Why Amazon Blocked Meta Muse (and Which AI Agents Can Still Shop for You)

What happened: Amazon shut the door on Muse

Meta launched Muse on September 8, 2026. It's a personal AI agent that handles multi-step chores across email, calendar, payments, dining and shopping. It runs its own browser on a cloud virtual machine, and it's available on iOS, Android, the web and WhatsApp. Within about a week it hit the top of Apple's free app chart in the US.

Then it ran into Amazon. Amazon asked Meta to keep Muse off its store. Meta said no. Around Sunday, September 20, Amazon flipped the switch. Anyone who sent Muse to Amazon.com started seeing a pop-up saying that continued access by an unauthorized AI agent breaks Amazon's Conditions of Use, which customers have already agreed to.

Read that line again. The warning isn't aimed at Meta. It's aimed at you, the customer. Amazon is reminding shoppers that their own account terms are on the line, not just Meta's reputation.

Amazon's public line was short: third-party apps that buy things on behalf of customers from other businesses should operate openly and respect a store's choice about whether to take part. In plain English, ask first, and take no for an answer.

The block matters because shopping is one of the headline use cases for agents. If the biggest online store in the West won't let a mainstream agent in, the pitch of 'tell your AI to buy it' gets a lot smaller overnight.

Amazon's case against Muse vs. Meta's answer

Amazon's complaint boils down to three points. First, Muse browsed Amazon without saying it was a bot. To Amazon's systems it looked like a regular shopper. Second, it could get into account pages and order history, which Amazon considers sensitive customer data. Third, Amazon says Muse captured and stored customers' Amazon logins without Amazon knowing about it.

Meta pushed back on the security part. It says Muse has no view into people's passwords or payment methods. Credentials sit in secure storage and are used only to sign in, so the AI model itself never touches them. Meta's security material also describes a separate reviewer agent that checks actions before they run, plus a rule that you approve sensitive steps like purchases.

Both things can be true at once. Meta may well store logins carefully. Amazon may still not want a third party holding keys to millions of its customers' accounts, however careful the vault is.

Here's the practical question for you: who do you want holding your login? Every extra place your password lives is one more thing that can leak, get misused or get your account flagged. That's not a Meta problem or an Amazon problem. It's a delegation problem.

And it's the same question you'd ask about a human assistant. You might happily let someone book your dentist appointment. You'd think twice before handing them your banking password and saying 'just sort it out'.

The real reason: $68 billion in ads (and a double standard)

Security is the stated reason. Money is the obvious subtext. Amazon's ad business brought in roughly $68 billion last year, about a tenth of its revenue. Most of that comes from sponsored listings that you see while you scroll search results.

An agent doesn't scroll. It doesn't notice the sponsored slot at the top, doesn't get tempted by 'customers also bought', and doesn't linger on a banner. If agents do the browsing, the ad inventory Amazon sells to brands starts looking a lot less valuable.

Then there's the double standard critics love to point out. Amazon's own Buy for Me feature, launched in 2025, lets its agent buy from other retailers' websites. Those retailers didn't opt in. They had to email Amazon to opt out. That's the reverse of the 'ask first' rule Amazon now demands from Meta.

To be fair, Amazon says Buy for Me identifies itself and lets brands leave. That's more than Muse did at Amazon. But 'you can leave if you notice' isn't the same as 'we asked first', and Amazon knows it.

Amazon also has its own shopping assistant, Alexa for Shopping, which since May 2026 researches and recommends products inside Amazon. So the agents allowed on Amazon are, conveniently, Amazon's. That's a business decision, not a law of nature.

Muse isn't the first: Perplexity, Google and OpenAI

Amazon has been fighting this battle for a while. In November 2025 it sued Perplexity over the shopping agent in Perplexity's Comet browser. In March 2026 a judge sided with Amazon and granted a preliminary injunction.

Then the Ninth Circuit threw that injunction out in August 2026. The court's reasoning was that the user, not the AI company, is the one accessing Amazon, and the agent is just a tool carrying out the user's instructions. That made Amazon's hacking-law argument much weaker.

The ruling didn't hand agents a free pass, though. Amazon still controls its own terms of service, and it can still block traffic it doesn't like. That's exactly the lever it pulled on Muse: not a lawsuit, just a technical block and a pop-up citing the rules you signed up to.

Muse won't be the last. Amazon has already restricted crawlers from OpenAI, Google and others, and says it's actively working to block third-party shopping agents from Google and OpenAI too. If you were planning to have any big-name agent handle your Amazon orders, plan on that being bumpy.

For small business owners, this matters beyond personal shopping. If you're counting on an agent to reorder supplies from Amazon, that workflow can break without warning. Build your process so a human can finish the job when the robot gets bounced.

Which AI agents can still shop for you?

The short answer: plenty of agents can still shop, just not everywhere. The map now depends on which store you're buying from and whether that store has made a deal.

Shopify took the opposite route to Amazon. On September 22, 2026, Shopify and Meta announced that Muse can check out at Shopify stores through Shop Pay. Shopify CEO Tobias Lütke said Meta's agent is welcome to shop across its merchants. Instead of blocking, Shopify is building standards so agents and stores can work together, with an opt-out for merchants who don't want in.

So if you buy from independent brands, many of which run on Shopify, agent checkout is actually getting easier. If you buy mostly on Amazon, it's getting harder, unless you use Amazon's own tools.

Here's the landscape as of late September 2026. Treat it as a snapshot, not a promise. Deals and blocks are changing week to week.

How to delegate shopping without handing over your logins

Here's the thing most people miss: the hard part of shopping usually isn't clicking Buy. It's the research, the price checking, and remembering to do it at all. The checkout takes ten seconds. The rest eats your evening.

So you don't need an agent with your password to save real time. You need one that does the legwork, reports back, and lets you press the button. That keeps you inside every store's rules, and your logins stay where they belong.

A simple rule of thumb: delegate the thinking, keep the paying. Let the assistant search, compare, shortlist and nag you. Keep the account access and the final click for yourself.

Some checks before you trust any agent with shopping:

Does it ask before it acts? An agent that buys first and reports later is a surprise waiting to happen. Look for explicit approval on anything that spends money.

Does it need your password? If yes, ask where that password is stored, who can see it, and how you revoke it. If you can't get a clear answer, don't hand it over.

Does the store allow it? Amazon has now told customers that using an unauthorized agent violates its terms. That's your account on the line, not the AI company's.

What happens when it gets blocked? If a store shuts the door mid-task, you want a plan B that doesn't involve losing an order or a day.

Where Agent Sonic fits: it asks, it searches, you buy

Agent Sonic takes the 'do the legwork, let me press the button' approach. It's a personal assistant that lives inside WhatsApp. No app to install, no dashboard. It doesn't log into your Amazon account, and it doesn't check out for you. That's a deliberate line, not a missing feature.

What it does do is the tedious part. It can browse the live web to compare prices and find products, then send you a short answer in the chat. You might message it: 'Find me a quiet dishwasher under 45 dB and compare prices at three stores.' You get a shortlist back and decide where to buy.

It also remembers. Tell it once, 'My printer takes the HP 305 cartridge,' and next time you won't need to dig through old receipts. Pair that with reminders: 'Remind me to reorder printer ink on the first of every month.' The nag shows up on schedule, and you place the order in thirty seconds.

It fits business errands too. Drop in a supplier invoice PDF and ask it to pull out the totals, or have it track a to-do list of things to reorder before the holiday rush. Sonic asks before acting on anything that matters, so you're never surprised by what it did on your behalf.

Will it save you the ten seconds of checkout? No. Will it save you the hour of tabs, comparisons and 'wait, did I already order that?' Probably. That's the part worth handing off.

If delegation without handing over your passwords sounds right, you can get access to Sonic at tryagentsonic.com/contact.

What the Muse block means for you

The Amazon and Meta fight is a preview of the next few years. Stores will pick sides: some will open up to agents with deals and standards, like Shopify, and some will guard the doors, like Amazon. Courts will keep redrawing the lines in between.

For you, the lesson is simple. Don't build your routine around an agent that needs your keys to a store that doesn't want it there. Use AI for the parts that are yours to delegate: research, comparison, memory and reminders. Keep the final say, and the password, with you.

That's not being cautious for the sake of it. It's just good delegation. You'd give a sharp assistant the errand and the shortlist, not your wallet and a shrug.

Frequently asked questions