Shopify Lets AI Agents Finish Your Checkout — the Anti-Amazon Bet on Agentic Shopping

On Monday, Shopify did the one thing Amazon refuses to do. The Ottawa e-commerce giant announced that browser-based AI agents can now complete full purchases — not just browse and fill carts, but read a checkout page, edit the address and delivery option, and submit the order with the buyer's authorization — on the websites of all its eligible merchants. No screenshots. No page scraping. No HTML archaeology. The agent simply calls a structured toolset, and the sale goes through.

Photo: Shopify CEO Tobias Lütke, photographed in New York City in 2019. A week before Monday's WebMCP checkout announcement, Lütke personally confirmed Shopify's deep partnership to bring agentic checkout with Shop Pay to Meta's Muse assistant. (Image via Wikimedia Commons)

The announcement: new tools, zero scraping

The news landed Monday, September 28, 2026, via Gil Greenberg, a staff product manager working on agentic commerce at Shopify. In a post on X, Greenberg put it bluntly:

"Shopping with an agent shouldn't feel like watching paint dry. Today, we're launching WebMCP support for checkout, including Shop Pay, for all eligible Shopify merchants."

Shopify had already extended WebMCP — a proposed standard built for agents that operate inside a buyer's browser — to its storefronts and carts. That let an agent comb through a merchant's inventory, search for products, and build an order. What was missing was the last mile: the checkout itself. Monday's change closes that gap.

The update introduces three new tools: get_checkout, which reads the checkout state; update_checkout, which modifies supported checkout fields; and complete_checkout, which submits the order after the buyer authorizes it. Shopify's developer changelog, also dated September 28, lists a fourth tool — navigate_to_storefront, which returns the tab to the storefront — rounding out the agent's checkout toolkit.

The pitch to developers is as much about what the tools replace as what they enable. Greenberg, writing on X, told browser-agent builders to stop parsing pages the hard way: "If your agent is operating in the buyer's browser, use WebMCP tools provided on storefront and checkout to efficiently complete order placement, instead of navigating HTML built for humans. These WebMCP tools provide structured and efficient APIs, purposely designed — via UCP — to ensure accurate commerce facts, required disclosures, and handoff requirements."

How it actually works: your browser, your session, your sign-off

There are two flavors of agent commerce at Shopify, and the distinction matters. Shopify already runs a hosted Model Context Protocol server that lets agents work server-to-server. WebMCP is the other lane: it is designed for agents that live inside the buyer's own browser tab, operating in the shopper's real, authenticated session — their cookies, their saved payment methods, their Shop Pay wallet.

Both lanes speak the same underlying language: Shopify's Universal Commerce Protocol (UCP), an open standard for product discovery, cart building, and checkout that Shopify co-developed with Google and a coalition of retailers and payment networks. Greenberg described UCP this way in a LinkedIn article announcing the rollout, as reported by PYMNTS:

"Shopify exposes structured commerce APIs via the Universal Commerce Protocol (UCP), that enables agents to discover products, build carts and checkout. UCP is the shared language that hosted MCPs and WebMCP both speak to. There are different access methods to the same protocol, to support wherever your agent runs."

Crucially, this is not autonomous purchasing. The changelog is explicit that complete_checkout means "submit checkout after buyer confirmation," and the tools hand control back to the buyer whenever input is required — 3D Secure authentication being the obvious example. The tools run inside Shopify's checkout-web with the same state as the checkout interface the shopper sees, expose no new API, and, according to the technical write-ups of the changelog, require no merchant configuration. An agent-driven checkout and a human-driven one are, from the platform's perspective, the same object.

The Amazon split: two philosophies, one month

The timing is what makes Monday's announcement a statement. Just eight days earlier, on September 20, Amazon blocked Meta's Muse personal assistant from shopping on Amazon.com on customers' behalf. According to GeekWire's reporting, Amazon first tried to get Meta to voluntarily exclude Amazon.com from Muse's shopping flow; when that failed, it cut the agent off outright. Amazon's stated reasons: Meta never disclosed that Muse would access the store, the agent does not identify itself while browsing, and it appeared to capture and store customer credentials in a way Amazon says creates privacy and security risk. Adidas is also reportedly moving to block agents from making purchases, per TechCrunch.

So within the same month, the industry's two biggest commerce platforms have planted flags on opposite hills. Amazon treats an unidentified agent operating inside a checkout as a security threat until proven otherwise. Shopify is betting the opposite: that identifying the agent, keeping it inside the buyer's own authenticated browser session, and requiring explicit buyer authorization before anything is submitted, is enough guardrail to make the risk worth the traffic.

It is a bet with real economics behind it. Shopify says AI-driven traffic to its stores grew eightfold year over year in the first quarter of 2026, with orders originating from AI-powered searches up nearly thirteenfold. And Shop Pay — the one-tap checkout now available to these agents — surpassed $400 billion in lifetime accelerated gross merchandise volume in June, the company reported this summer. When the checkout button is that valuable, you do not wall it off from the fastest-growing traffic source in e-commerce.

A crowded dance card: Muse, Instinct, and the agent gold rush

Monday's platform-wide rollout did not arrive in a vacuum. It came exactly one week after Shopify CEO Tobias Lütke announced a deep partnership with Meta to enable agentic checkout with Shop Pay for Meta's Muse personal AI agent across all Shopify stores. "We are excited to announce we are partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores, offering people an easy and delightful way to shop and check out with Muse," Lütke wrote on X on September 21, with Meta chief AI officer Alexandr Wang confirming the same day. The timing was pointed: Amazon had blocked Muse the night before.

Monday also brought a second named partnership. Shopify announced on X that Instinct's personal agent can now shop and check out with Shop Pay, and Instinct founder Noah Shinn confirmed the collaboration the same day, saying users can now get "product discovery, checkout and order updates in one conversation."

"Instinct can now search Shopify's merchant network for products, and find live information on prices, sizes and availability. When you're ready to buy, Instinct sets up your order with the store so you can check out with Shop Pay using your saved payment and shipping details." — Noah Shinn, founder of Instinct

The Instinct news landed on a day when the startup was already making headlines: Instinct closed a $1 billion Series C at a $10 billion valuation on September 28, with Sequoia, Benchmark, and Coatue participating, according to Reuters. A four-month-old company, a ten-billion-dollar valuation, and same-day checkout rights on Shopify's merchant network — that is the velocity of the agentic commerce land grab right now.

What changes for merchants and shoppers

For merchants, the immediate consequence is simple: an order placed by Meta's Muse or Instinct through WebMCP is a real order, real revenue, indistinguishable from one placed by a person typing into a browser. Shopify's decision to make agentic discovery the default — its Agentic Storefronts program switched on for all eligible merchants on an opt-out basis back in March — means most store owners are already in the funnel whether they have thought about it or not.

The subtler consequence is a data-quality bar that just got much higher. A human shopper forgives a typo in a variant name or a stale inventory count; an agent reading a product catalog programmatically acts on whatever is there, at scale. Sloppy product feeds were an annoyance in the search-engine era. In the agent era, they are a liability.

For shoppers, the appeal is convenience without the creep factor of handing over credentials. Because WebMCP runs inside the buyer's own browser session, the agent never needs the shopper's login — it operates with the permissions the shopper already has, and the buyer still confirms the purchase. Whether consumers trust that model at scale is the open question: a PYMNTS Intelligence study found that 56% of American consumers would let an agent search and compare products on their behalf, but only 35% would grant an agent access to their saved payment credentials. Shopify is betting that keeping the human in the confirmation loop closes that gap.

The questions Shopify didn't answer

Monday's announcement is a platform capability, not a finished governance model, and several questions are still open. The changelog says the tools require no merchant configuration — but it is silent on whether merchants get an opt-out, and Shopify has not publicly defined who counts as an "eligible" merchant. Liability for a mistaken agent purchase — wrong size, wrong address, a duplicate order — remains unassigned in any public document. And attribution is about to get murky: when the purchase happens inside a chat window the merchant never sees, who owns the customer relationship?

There is also the matter of Amazon itself. Amazon sits on UCP's technical steering council alongside Meta, Microsoft, Salesforce, and Stripe — the open standard both sides now claim. The industry may be converging on how agents should transact, even as its biggest players diverge on whether they should be allowed to. Which philosophy wins will be decided not by protocol documents but by conversion rates, chargeback rates, and consumer trust over the next two quarters.

One thing is already clear: the era of the agent that could only add to cart is over. Shopify just gave it the keys to the register.

Sources: Reporting for this article drew on TechCrunch (Sarah Perez, September 28, 2026), PYMNTS (September 28 and September 22, 2026), Unite.AI's write-up of Shopify's September 28 developer changelog, GeekWire's reporting on Amazon's September 20 Muse block (via secondary coverage), and Reuters' reporting on Instinct's $1 billion Series C. Direct quotes are attributed to their original posts on X and LinkedIn as cited above.