Amazon, JPMorgan and Yelp lock out AI shopping agents

Websites are shutting out AI shopping and banking agents

Amazon, JPMorgan Chase, Charles Schwab and Yelp are blocking AI agents that try to shop, book or manage accounts on their sites, The Verge reported on 17 October 2026. The sites are responding to a wave of personal agents, including Meta's Muse, OpenAI's Dots, xAI's Grok and Instinct, built to handle purchases, bookings and account tasks without a human at the keyboard. TechCrunch had documented the same pattern on 6 October 2026, naming eBay, Zillow, Pizza Hut, Adidas and several airlines among the sites agent users say turned them away.

AI shopping and banking agents are being blocked because they can trip anti-bot defenses, bypass a site's sales funnel, or reach an account without a formal partnership. Amazon, JPMorgan Chase, Charles Schwab and Yelp have confirmed blocks on agents like Meta's Muse, OpenAI's Dots and xAI's Grok, while Walmart and Shopify opened their sites to approved agents instead.

What changed

Amazon blocked Meta's Muse from its retail site after already fighting Perplexity in court over agentic shopping. Amazon banned Perplexity's shopping feature and sued the company last year; a judge ordered Perplexity's agents to stop, an appeals court overturned that order in August 2026, and Amazon has since filed an amended complaint, according to The Verge.

Yelp does not allow non-human traffic on its platform unless the agent has paid for its data licensing program at business.yelp.com/data. Agents without that partnership fail to get a quote, join a waitlist or book a table, TechCrunch reported.

Delta Air Lines has no partnership that lets a third-party agent book flights on a customer's behalf, Delta's general manager of global communications, Heena Chavda, told TechCrunch. United points to its terms of use, which bar "any robot, spider, other automatic device" without the airline's written permission.

JPMorgan Chase CEO Jamie Dimon said on an earnings call on 13 October 2026 that the bank will not "allow just any... outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan." A JPMorgan spokesperson confirmed to CNBC that the bank blocks outside agents such as Muse and Instinct from account access. Bloomberg reported on 16 October 2026 that Charles Schwab is blocking agents from moving customer money too.

Some blocks are unintentional. Walmart partnered with Meta to let Muse shop on its site, announced at Meta's Connect conference in September 2026, but users still report failed checkouts because the agent gets stuck at a human verification step built to stop bots, not customers.

To fix that friction, Meta, Walmart, Stripe, Sierra, Genesys, Rocket, NiCE, Decagon and Shopify are building an open standard called the Personal Agent Protocol. Meta previewed it in a 6 October 2026 blog post, describing two tests it already applies before Muse acts: whether a reasonable person would do the same thing by hand, and whether the system would still work if every agent made the same request.

Why it matters for agent builders

A well-built agent can still get blocked, because most of these defenses were not built to tell a legitimate personal agent apart from a bot farm. "There are all kinds of things that are set up not even to block agents, but to block in general bots or programs that are trying to scam or hack," Chris Canal, CEO of the AI safety evaluator EquiStamp, told The Verge. "These AI agents trigger those same safeguards."

The blocks also carry a business risk for the labs shipping agents. Canal told The Verge the pattern affects "the perceived value of the Anthropics and the OpenAIs," since a growing list of inaccessible sites narrows what an agent can actually be asked to do.

Builders who want their agents to work on commerce sites have two paths worth tracking: negotiate a direct connector with the business, the way Meta did with Walmart, Gap, Sephora and Best Buy, or wait for an authentication layer like the Personal Agent Protocol to settle how an agent proves it is acting for a real person.

What to watch

The Personal Agent Protocol is still a preview, not a shipped spec, so its authentication and identity design is the detail to track next. Separately, Cloudflare has been blocking crawlers that scrape sites for both search indexing and AI training since introducing a one-click block for AI crawlers in 2025, a parallel front in the same fight over how much of the web an automated client gets to touch.

Key takeaways

• Amazon, JPMorgan Chase, Charles Schwab, Yelp, Delta and United are among the sites now blocking or restricting AI agents, per The Verge and TechCrunch reporting from October 2026.
• Yelp requires agents to pay for its data licensing program before it allows non-human traffic to book or get quotes.
• JPMorgan CEO Jamie Dimon said on 13 October 2026 that the bank will not let "just any... outside agent" reach customer accounts.
• Meta, Walmart, Stripe, Shopify and five other companies are building the Personal Agent Protocol, an open standard for how personal agents identify themselves to businesses.
• An appeals court overturned, in August 2026, the order that had barred Perplexity's shopping agent from Amazon, and Amazon has since filed an amended complaint.

FAQ

Why are websites blocking AI agents?

Sites block AI agents for a mix of reasons. Existing anti-bot defenses built against spam and fraud catch agent traffic by accident, some businesses want a formal paid or partnered relationship before letting an agent act, and others see agent traffic as a threat to ad views or their own checkout funnel, which Perplexity argued was Amazon's real motive, per The Verge.

Which companies have confirmed blocking AI shopping or banking agents?

Amazon, JPMorgan Chase and Charles Schwab have confirmed blocking agents from account or shopping access, and Yelp requires a paid data licensing partnership before it allows agent traffic. Delta and United have no agent booking partnerships, and users have reported blocks at eBay, Zillow, Pizza Hut and Adidas, according to The Verge and TechCrunch.

What is the Personal Agent Protocol?

The Personal Agent Protocol is an open standard that Meta, Sierra, Genesys, NiCE, Decagon, Rocket, Shopify, Stripe and Walmart are jointly developing to define how personal agents authenticate and communicate with businesses. Meta previewed it in a blog post on 6 October 2026.

Source: The Verge Discussion: Hacker News

AI Agents Listing tracks which MCP servers and agents support agentic commerce as businesses settle on how to let them in.