Half the web just closed the door on your agent

An AI agent can shop at Walmart and Sephora this month, because both signed on as Meta shopping partners. The same agent gets shown the door at Delta, JPMorgan Chase, Charles Schwab, and Yelp. The Verge documented the split on October 17, and the Hacker News thread that followed collected 130-plus comments within a day. Blocks and red carpet, same week. That combination is what makes this worth planning around if you ship agents.

Who is showing agents the door

Yelp draws the clearest line: the company told TechCrunch it only allows agents that pay for its data licensing program. Delta blocks agents from booking tickets on behalf of users. JPMorgan Chase and Charles Schwab confirmed they keep agents out of customer accounts, citing security. Some blocks stay quiet: users report that Cars.com and Amtrak stopped working with their agents at some point, no announcement attached.

None of this started last week. Amazon banned Perplexity's agentic shopping feature in November 2025 and sued. A judge ordered Perplexity to stop, an appeals court overturned that order in August, and Amazon has since filed an amended complaint, according to The Verge's recap of the case. The docket is still open, which means the legal ground under agent access is unsettled on both sides.

The other half is rolling out the carpet

Meta took the partnership route with Muse. Instead of fighting Amazon, it signed retailers: Walmart, Gap, Sephora, Best Buy, and others let Muse shop on their sites as of early October. Shopify opened its network of storefronts to agents this month. "Turning away a personal agent means turning away the customer behind it," Meta wrote in its response to the blocks.

Perplexity made the sharpest argument in the whole fight. In the response The Verge quoted, the company wrote that Amazon "does not believe in your right to hire labor, to have an assistant or an employee acting on your behalf." xAI's Elon Musk responded to Grok's own Amazon problems by musing that he "should start a competitor to Amazon." The rhetoric is entertaining. The partner lists are the part with consequences.

Most of the friction was never aimed at agents

Chris Canal, CEO of the AI safety evaluator EquiStamp, told The Verge that anti-bot systems are "set up not even to block agents, but to block in general bots or programs that are trying to scam or hack," and agents trigger those same safeguards. Reports on Reddit suggest Google has flagged some Muse accounts for "suspicious activity," and users have hit failed checkouts at Walmart despite the partnership. Cloudflare added its own layer: a one-click AI crawler block in 2025, then a crackdown on crawlers that do search indexing and AI training at the same time.

Canal's other prediction deserves more attention than it got. The blocks will make the web more annoying for humans: proof-you-are-human hoops on a grocery site, in his wording. That cost lands on people who never asked an agent to do anything for them.

What an agent builder does on Monday

Build for the open set first. Shopify storefronts and the Meta partner retailers work today, and they are where agent transactions belong. Treat everything else as read-only until a site proves otherwise. Browsing-grade access is nearly free while the access question gets sorted: DeepSeek's new Search and Fetch APIs bill $0.75 per 1,000 successful requests, and until billing starts on November 1 those calls cost nothing.

Keep a human in the loop where the blocklists live. A blocked purchase attempt on a bank account is worse than a failed one; it can cost the user the account. The JPMorgan and Schwab position is security-driven, and no prompt engineering gets around it. Route around it by design: the agent drafts, the human confirms, done.

And log everything. Last week I covered the OpenAI rogue-agent disclosures, where misbehavior surfaced months after the runs that caused it (the disclosure-gap post). A Walmart checkout that silently fails, or a site that quietly starts returning 403s, is the same species of problem at smaller scale. An agent that cannot show its own trace cannot prove where it got blocked.

Plan for the split, not for a treaty

The optimistic read says this is an early-stage negotiation that ends in universal agent APIs. The Amazon docket and the Yelp licensing desk point somewhere less tidy: access as a business line, priced per site, with some sites never saying yes. "There are just fewer useful things the agents can do," as Canal put it, when companies actively work against access. The realistic planning assumption is that the open set grows through deals, not through agents winning the argument. Next signal to watch: whether Delta-style blocks show up with a price tag attached. Yelp already has one.