Amazon, Yelp and airlines are shutting AI shopping agents out the door

Weeks after Meta and OpenAI pitched AI agents that shop and book trips for you, the sites those agents need to reach are the ones refusing to let them in.

Amazon blocked Meta's Muse from its retail site on September 20, cutting off an AI agent that had been introduced just weeks earlier to handle shopping and appointment booking on a user's behalf. Amazon told GeekWire that Meta never notified it before Muse began browsing the store. Muse didn't identify itself while crawling product pages, and Amazon had never authorized it to touch customer accounts or process a transaction. An Amazon spokesperson put it bluntly: third-party tools that want to buy on a customer's behalf "should operate openly and respect service provider decisions about whether or not to participate." That's the line Amazon is holding. Muse users now get a pop-up telling them the agent is violating Amazon's terms of use.

That single block is now part of a pattern spreading across retail, travel and finance. According to reporting from TechCrunch and Android Headlines, brands including Yelp, eBay, Zillow, Pizza Hut, Adidas and several airlines have started turning away non-human traffic at the door. Delta is actively blocking outside agents from booking flights. Yelp won't let an agent pull a quote, join a waitlist or book a table unless the company behind it has paid into Yelp's formal data-licensing program. That's the same kind of deal Yelp already struck with OpenAI to feed 330 million reviews into ChatGPT. The message to agent builders is consistent: pay for access, ask permission first, or get walled off.

Travel shows the split most clearly, because Expedia and Booking Holdings picked opposite bets on the same technology. Expedia partnered with Meta's Muse, letting the agent plug directly into its booking flow. Booking Holdings refused. Its reasoning, laid out in reporting from Skift and 24/7 Wall St., is simple: an AI agent can plan a trip, but it can't guarantee hotel inventory, authenticate the actual traveler, convert currency, settle funds, or untangle a cancellation that cascades across three separate bookings. Booking has spent the last year building the opposite kind of control. 73% of its gross bookings now run through its own merchant platform, up four points year over year, which means Booking, not an outside agent, still owns checkout, settlement and refunds. Letting an agent book around that platform means giving up the part of the business Booking has worked hardest to keep.

OpenAI gave its own tell on how fragile the current setup is. Skift reported that ChatGPT walked back in-chat transaction completion for travel bookings in March, pulling back from letting the bot finish a purchase inside the chat window. Good news for Expedia and Booking, bad news for anyone who thought checkout-by-chatbot was already solved.

The money question nobody has answered

Here's the part that actually explains the wall going up. Morgan Stanley projects agent-driven purchases could reach $385 billion in U.S. digital commerce by 2030, as much as 20% of all e-commerce, bigger than the entire U.S. e-commerce market was in 2011. That's the number VCs have been funding against. But nobody has written the contract that says who pays when it goes wrong.

If an agent holding a saved payment method and shipping address gets hijacked, the fraudulent purchases look identical to the agent's normal behavior. That makes them far harder to catch than a stolen credit card number. Research cited by NewtonX frames it as a $385 billion liability vacuum. Merchants, card networks, banks and regulators all have a stake in who eats the cost of a bad agent transaction, and none of them have signed anything that settles it. That's a direct extension of what's already playing out at the largest U.S. banks. JPMorgan Chase, under Jamie Dimon, barred outside agents including Meta's Muse and the $10 billion-valued startup Instinct from touching customer accounts. Charles Schwab, Bank of America and Citigroup have taken similar positions, all citing the same fear: a rogue agent moving money nobody authorized it to move.

Retailers and airlines are drawing the identical line, just one step earlier in the transaction. They're not worried about an agent that already has your money. They're worried about an agent that's about to get it, with no clear answer for who's on the hook if it books the wrong flight, buys the wrong size, or gets scammed mid-transaction.

None of this kills agentic commerce. Yelp's licensing deal with OpenAI and Expedia's partnership with Muse show there's a version of this that works, one where the agent operator pays for access and identifies itself, rather than scraping in uninvited. But the VCs who funded a wave of shopping and booking agents this year were betting on open access to the sites agents need to transact on. What's showing up instead is a toll booth, and in some cases a locked gate. The standards fight over how an agent proves who it is, who it's acting for, and who answers for its mistakes hasn't started in earnest. Until it does, the biggest platforms on the internet are choosing the simplest option available to them: say no.

Also read: Stripe Agrees to Buy AI Model Router OpenRouter for $7.5 Billion • An AI tool called REA now reverse engineers software in minutes not years • TypeSafe's Jev becomes the fastest-adopted model in Vercel AI Gateway history

This article is posted in AI News, check it out for more related stories.