Agents That Place Orders Scare Me More Than Agents That Write
Shopify and Meta gave bots checkout access. The convenience is real; the guardrails aren't.
This month Shopify let browser agents complete purchases through WebMCP, and Meta's Muse got the same hook for product search. Agents can now read, edit and submit checkouts across merchant sites. Amazon reportedly asked to be pulled from Muse's list.
That tells you the worry isn't capability, it's permission. An agent that writes an email is a typo. An agent that buys is a charge on your card with no human in the loop.
The Personal Agent Protocol from Meta, Sierra, Walmart and Stripe is the right instinct -- OAuth-style sign-in and approval steps. But the default will be 'allow once,' and people forget.
If you sell online, WebMCP access is worth understanding now. If you buy with an agent, set a hard spend limit and read the log. Autonomy without a ceiling is just an open tab.