AI Agents Learned to Spend Your Money This Week
Dots, Autopilot, Shopify's WebMCP checkout, and Meta's Muse all decided agents should buy things for you. The convenience is real and the guardrails are not.
Agent-to-agent commerce stopped being a demo this month. Shopify turned on WebMCP support so browser-based agents can read, modify, and submit checkouts across merchant sites. Meta's Muse got the same Shopify hook for product search and purchasing. Microsoft introduced Autopilot, a 'digital coworker' with its own identity and configurable permissions. The through-line is that the agent is no longer just researching; it's transacting.
The telling detail: Amazon reportedly asked to be removed from Muse's agent access list, citing automated shopping restrictions. When the biggest retailer opts out of agent checkout, it tells you the friction isn't technical, it's trust and liability. Who eats the bad purchase, the wrong item, the hallucinated size?
Sierra published a draft of its Personal Agent Protocol on October 6, laying out how agents identify themselves, open sessions, and get customer-approved access across sites and APIs. That's the unglamorous plumbing that has to exist before this is safe, and it's further along than the marketing suggests.
My take: let an agent fill the cart, not click buy. The useful part is the lookup and the comparison; the dangerous part is the irreversible action. Until the protocols ship real approval steps and a clear refund path, I'm keeping the final tap for myself.