Leadership Reports disagree 2 publishers 3 min read Published Sep 21, 2026, 10:22 AM PDT

Amazon shut Meta's Muse out of its store with a conditions-of-use popup

Amazon stopped Meta's agent at its own website on September 20, citing conditions of use that speak about robots and data gathering tools. Its court case against Perplexity's shopping agent had already been set back on appeal.

The Board Room · Leadership desk

Send a correction

What happened

Amazon blocked Meta's Muse agent from shopping on Amazon.com on September 20, twelve days after the agent launched, with a popup telling users that its continued access violates Amazon's conditions of use.
Amazon says it was not told in advance that Muse would reach its store, that the agent does not identify itself while browsing, and that it appears to capture and store customer credentials and scrape account data.
Meta says Muse runs in a dedicated virtual machine with its own browser, that a monitor called Sentinel approves its internet traffic, and that the agent asks users before purchases and other sensitive actions.
The two companies remain partners: Amazon products have sold inside Facebook and Instagram since 2023, and Meta signed a multibillion-dollar deal in April 2026 to run agentic AI workloads on Amazon's Graviton chips.

Why it matters

What it limits constraint An agent that reaches a retailer through public web pages with no API and no agreement holds access at the retailer's discretion, and the warning Muse users met labels that agent unauthorised. A purchasing workflow built that way lasts as long as the retailer tolerates it.
What doesn't add up contradiction Amazon's credential allegation and Meta's denial cannot both be right, and neither has been independently verified, so a customer deciding whether to let an outside agent hold an Amazon login is choosing between two press statements.
What it costs cost Amazon pays for the line it is holding out of an advertising business that turned over more than $68 billion in 2025 on shoppers seeing sponsored products. Alistair Barr of Business Insider has reported that blocking ChatGPT bots could forgo purchases from roughly a billion monthly OpenAI users.
What it sets up precedent Amazon has already moved against agents from Google and OpenAI. Permissions negotiated retailer by retailer, bilaterally, look like the likely default for agentic commerce.

Next story · Invest · 4d ago

Zuckerberg says Meta will take a commission on Muse purchases as app tops 2.5 million US downloads in two weeks

Confirmed3 publishers

Amazon's other route had already run into trouble. It sued Perplexity in November 2025 over shopping conducted through the Comet browser and won a preliminary injunction in March 2026 ^[6]. On August 4 the Ninth Circuit vacated that order, holding that on the record before it Amazon was unlikely to show that Perplexity rather than the user accessed its computers, and it denied rehearing on September 10 ^[5]. Muse was cut off ten days later ^[22]. GeekWire first reported on Monday that Muse users were hitting the bot blocker ^[21], and the startup founder Jonathan Wegener posted a screenshot on September 21, writing, "Muse vs Amazon bot detection. Uh oh." ^[20]

The contract being enforced was not drafted for shopping agents. Amazon's conditions of use do not explicitly mention AI shopping assistants, and the site-access licence excludes the use of "data mining, robots, or similar data gathering and extraction tools," according to Business Insider ^[11]. The standard Amazon states in public is more specific than that language: it says it expects agents to be transparent, to let retailers opt out, and to offer a mutual exchange of value ^[7]. An Amazon spokesperson said, "Agentic third-party applications such as Muse have the same obligations." ^[4]

Meta's security account answers a narrower question than Amazon asked. Meta says the agent "has no visibility into people's passwords or payment methods" ^[25]. Separate reports that Muse could read user messages without the required permission enabled cut against that assurance, according to implicator.ai ^[26]. In outside testing the agent had already completed Amazon purchases, including one order placed while unrelated products sat in the user's basket ^[13].

Amazon runs an outbound agent of its own, under the rules it is now asking of Meta. Buy for Me, announced in April 2025, buys products from brand websites outside Amazon, and the company says that service identifies itself and lets brands opt out ^[17]. Alexa for Shopping arrived in May 2026 ^[16]. Amazon also says third-party agents can bypass the personalisation built into its store and show shoppers products that do not reflect their history ^[12].

Amazon has asked Meta to remove its store from Muse, says the two are in direct talks, and declined to say whether it would sue ^[3]. A deal between these two is a plausible ending, and it is the kind of ending available to a company with leverage. Business Insider notes that Amazon's recently announced advertising partnership with OpenAI suggests agents and retailers will have to find a way to work together ^[18]. Terms agreed between a handful of large companies are a private arrangement, and the developer outside them gets the popup.

For this quarter the question is narrow: whether Muse can check out at Amazon. The wider one is whether a customer's authority to buy transfers to the software that customer hires, and it is being settled in appellate records and terms-of-use pages. Until a court rules on a full record, the working rule for anyone building against a site they do not own is that site's detection, and Amazon turned it on Muse on a Sunday ^[10].

What to watch

Whether the direct talks produce published terms for Muse's access to Amazon, or Amazon files suit against Meta.
Whether Amazon rewrites its conditions of use to name agents and spell out the opt-out and the exchange of value it says it expects.
Whether the Perplexity case returns to the district court and produces a ruling on who accesses a site when an agent does the clicking.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence62
Adoption61
Hype gap+14
Incentives80
Confidence66

Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

[1]
Amazon blocked Meta's Muse agent from shopping on Amazon.com on September 20, 12 days after the agent's September 8 launch, with a popup citing its Conditions of Use.
Reported SupportedView cited source
[2]
People who send Meta's Muse assistant to Amazon see a warning that "continued access by an unauthorized AI agent" violates the retailer's conditions of use.
Reported SupportedView cited source
[3]
Amazon asked Meta to remove its store from Muse, said the companies were in direct talks, and declined to say whether it would sue.
Reported SupportedView cited source
[4]
An Amazon spokesperson said: "Agentic third-party applications such as Muse have the same obligations."
Reported Supported Source: Amazon spokesperson, via Business InsiderView cited source
[5]
The Ninth Circuit vacated Amazon's preliminary injunction against Perplexity's Comet agent on August 4, holding that, on the record before it, Amazon was unlikely to show Perplexity rather than the user accessed its computers; rehearing was denied September 10.
Reported SupportedView cited source
[6]
Amazon sued Perplexity in November 2025 over similar activity by its Comet browser and won a preliminary injunction in March 2026.
Reported SupportedView cited source
[7]
Amazon says it expects agents to be transparent, allow retailers to opt out, and offer a mutual exchange of value.
Reported SupportedView cited source
[8]
Whether Muse itself captures and stores credentials in the manner Amazon describes has not been independently verified, and Meta had not immediately responded to a request for comment on Sunday night.
Reported SupportedView cited source
[9]
Amazon has also moved to restrict agents from Google and OpenAI.
Reported SupportedView cited source
[10]
A popup began appearing Sunday for Muse users trying to shop on Amazon, saying the agent's continued access violates Amazon's Conditions of Use.
Reported SupportedView cited source
[11]
Amazon's conditions of use do not explicitly mention AI shopping assistants; the site-access license excludes the use of "data mining, robots, or similar data gathering and extraction tools".
Reported SupportedView cited source
[12]
Amazon said agents can bypass the personalisation built into its shopping experience, potentially showing users products that do not reflect their history or recommendations.
Reported SupportedView cited source
[13]
Muse had already completed Amazon purchases in outside testing, including an order placed while unrelated products remained in the user's basket.
Reported SupportedView cited source
[14]
Amazon and Meta remain partners: Amazon products have sold inside Facebook and Instagram since 2023, and Meta signed a multibillion-dollar agreement in April 2026 to run agentic AI workloads on Amazon's Graviton processors.
Reported SupportedView cited source
[15]
Amazon's advertising business generated more than $68 billion in 2025 and depends on people seeing sponsored products.
Reported SupportedView cited source
[16]
Amazon introduced Alexa for Shopping in May 2026.
Reported SupportedView cited source
[17]
Amazon's Buy for Me feature, announced in April 2025, purchases products from outside brand websites, but Amazon says the service identifies itself and allows brands to opt out.
Reported SupportedView cited source
[18]
Business Insider says Amazon and OpenAI's recently announced advertising partnership suggests the companies may ultimately need to find a way for agents and retailers to work together.
Reported SupportedView cited source
[19]
Business Insider's Alistair Barr previously reported that blocking ChatGPT bots could mean missing purchases from OpenAI's roughly 1 billion monthly users.
Reported Supported Source: Alistair Barr, Business InsiderView cited source
[20]
Startup founder Jonathan Wegener shared a screenshot of the warning on X on September 21, 2026, writing: "Muse vs Amazon bot detection. Uh oh."
Reported Supported Source: Jonathan Wegener on XView cited source
[21]
GeekWire first reported Monday that Muse users were encountering Amazon's bot blocker.
Reported SupportedView cited source
[22]
Amazon's block on Muse came 10 days after the Ninth Circuit denied rehearing in the Perplexity case.
Derived Supported
[23]
Amazon said it was not told in advance that Muse would access its store and did not authorise the activity; it says the agent does not identify itself while browsing, appears to capture and store customer credentials, and scrapes account data.
Reported ContestedView cited source
[24]
Meta says Muse runs in a dedicated virtual machine with its own browser, that a separate monitoring agent called Sentinel approves internet traffic, that Muse asks users before sensitive actions such as purchases, and that when a service lacks an API Muse can operate it through a browser as a person would.
Reported ContestedView cited source
[25]
Meta says Muse "has no visibility into people's passwords or payment methods."
Reported Contested Source: MetaView cited source
[26]
Separate reports that Muse could read user messages without the required permission enabled cut against Meta's privacy assurances.
Reported InsufficientView cited source

Sources

2 independent publishers whose own reporting we read for this story.

businessinsider.com
1 article · September 21, 2026
Amazon is keeping Meta’s Muse out of its shopping carts
implicator.ai
1 article · September 21, 2026
Amazon Blocks Meta Muse Shopping Agent 12 Days After Launch

Clarity analysis

How the coverage leans and what the record actually supports. Read the methodology

Perspective Coverage

How much of the coverage speaks to builders, operators and investors. It measures emphasis, not whether the story is right.

Builder

For anyone building an agent that drives a real browser, the useful detail sits in Implicator's account. Meta says Muse runs in a dedicated virtual machine with its own browser, that a monitoring agent called Sentinel approves its traffic, and that credentials go into storage the agent cannot read. Amazon's answer is that the agent does not announce itself and appears to capture credentials anyway. No outside party has tested either version. Business Insider supplies the commercial edge: Muse topped Apple's US free-app chart within a week and was stopped by a popup on day twelve. Amazon's conditions of use do not mention AI assistants, so the clause doing the blocking is the old one about "data mining, robots, or similar data gathering and extraction tools".

Operator

Amazon has now published a usable test for outside agents: identify yourself, respect a retailer's decision not to participate, and bring back something of value. Business Insider has the fullest version, including the spokesperson's line that "Agentic third-party applications such as Muse have the same obligations." The operational objection is more concrete than the security one. Amazon says agents skip the personalisation in its store, so a shopper can be served products that ignore their own history and recommendations. Implicator covers what Amazon actually did: a popup, a request that Meta take the store out of Muse, direct talks, and no answer on litigation.

Investor

Implicator carries the figures behind the stance. Amazon's advertising business took more than $68 billion in 2025 and depends on shoppers seeing sponsored placements, and the same company shipped Alexa for Shopping in May 2026 and has run Buy for Me, which purchases from other brands' sites, since April 2025. Business Insider argues the cost runs the other way too, citing Alistair Barr's earlier reporting that blocking ChatGPT bots could forgo purchases from roughly a billion monthly OpenAI users. Meta and Amazon are also counterparties: Meta signed a multibillion-dollar agreement in April 2026 to run agentic AI workloads on Amazon's Graviton processors.

Reality

Evidence, adoption, hype gap, incentives and confidence, each read independently from the current record on the scale shown beneath it. How these are measured.

Evidence62: 0100
Firm on the block, thin on the accusation
The block itself is not in doubt: two publishers quote the same popup wording, and a user's screenshot put it on the record before either wrote. The security case is weaker. Every detail about captured credentials and scraped account data comes from Amazon's own statement, and Implicator says outright that nobody has verified it. The appellate history that shapes what Amazon can do next rests on Implicator alone, and Meta had not commented when both pieces went out.
Adoption61: 0100
A live block on an agent people are using
This is already running in production on both sides. Muse launched on 8 September, topped Apple's US free-app chart within a week, and had completed real Amazon orders in outside testing. Amazon's countermeasure is equally real: users hit the popup from 20 September, and the same company has moved against Google and OpenAI agents. Neither piece says how much agent traffic Amazon was seeing.
Hype gap+14: −100 understated0 aligned+100 overstated
Precedent language ahead of the record
Both pieces present this as the test of whether a shopper can send an agent anywhere, and Implicator's own reporting undercuts that reading. Amazon used a popup and a phone call, not a complaint, and the Ninth Circuit left the terms-of-service question untouched when it vacated the Perplexity injunction. The overstatement is modest and mostly sits in framing: the accusation of credential capture is repeated as a reason for the block well before anyone has checked it.
Incentives80: 0100
Every statement here comes from an interested party
Amazon's advertising business took more than $68 billion in 2025 from shoppers seeing sponsored products, and Amazon sells competing agents of its own in Alexa for Shopping and Buy for Me. Meta was twelve days into a launch that had reached the top of the app chart. The two are also counterparties on a multibillion-dollar Graviton deal signed in April 2026, which gives both reasons to talk rather than litigate. Every account of the security dispute comes from Amazon or Meta.
Confidence66: 0100
Solid on what happened, open on what it means
Dates, quotes and the popup text hold up across both accounts, and the court history is specific enough to check. The unsettled parts are the ones that decide the outcome: whether Muse handles credentials as Amazon claims, and whether Amazon's Conditions of Use bind an agent a customer chose to send. Implicator's own answer to the legal question is one word, unresolved.

Topics and entities

Topics

AI Agents
Agentic Commerce
Terms-of-service enforcement
Retail and Commerce Media
Bot and spam detection
Platform access litigation