When the AI Agent Reaches Checkout, Amazon Shuts the Door

You type one sentence, "find me hiking boots in size ten, under ninety dollars, and order them," then close the laptop. While you get on with your day, a piece of software opens the retail sites, compares a dozen models, reads the reviews, fills the cart, enters your address and confirms the payment. By the time you look again, an order confirmation is waiting. That is the promise of the autonomous shopping agent, an artificial intelligence that no longer merely answers but acts in your place across the web.

None of this is hypothetical anymore. Since February 2026 you can buy directly inside ChatGPT; Perplexity's Comet browser goes further, offering to run the whole errand on any store you like. Except that, on March 9, 2026, a federal judge in San Francisco ordered that agent to stay off Amazon entirely. The story of that slammed door says almost everything about what you gain, and what you give up, when you hand your card to a machine.

The chore, delegated

What the agent takes on is not the pleasure of buying but its thankless half. The tedious comparison across fifteen tabs, the form to retype, the promo code to hunt down, the payment window that times out: so many minutes shaved off each week for tasks nobody asks for. An assistant that opens the sites, remembers your preferences and goes all the way to the "pay" button hands back a slice of the day that the errand used to seize.

The numbers show the appetite. In the first quarter of 2026, traffic sent to Shopify stores by AI tools grew eightfold year over year, and orders coming from AI-assisted searches nearly thirteenfold. Behind those curves, an ordinary habit is shifting: asking rather than searching, delegating rather than clicking. For anyone who dreads shopping online, the comfort is real and immediate.

Still, that comfort rests on a condition rarely spelled out: the agent has to be able to go in where you go in. And it is exactly that threshold the courts have just examined.

Two permissions, not one

The dispute has pitted Amazon against Perplexity since the autumn of 2025. The retail giant sent a first cease-and-desist on October 31, then filed suit on November 4. Its grievance rests on a distinction Judge Maxine Chesney adopted as her own: the fact that you, the customer, authorized an agent to use your account does not mean Amazon, the owner of the site, authorized that agent to log in. Two permissions, not one. Your green light does not stand in for the store's.

The filing lays out an unflattering mechanism. To get past the defenses, Comet presented itself to Amazon's servers as the Chrome browser, transmitting the same technical signature as any ordinary visitor, so that nothing set it apart from a human. Amazon says it issued at least five warnings from November 2024 onward, then put up a technical barrier in August 2025, which a software update circumvented in under twenty-four hours.

On March 9 the judge sided with Amazon: a preliminary injunction, a ban on reaching password-protected areas including Prime accounts, and an order to destroy the data already collected. The rest stays open, an administrative stay was granted in late March and Perplexity took the case to the appeals court in early April. But the principle is set, and it concerns you directly: the agent you employ goes only where the site is willing to let it in.

The checkout that slips away

Even without a lawsuit, the last gesture, the act of paying, resists. OpenAI learned this the hard way. The company launched "Buy it in ChatGPT" on February 16, 2026, a built-in checkout made with Stripe to purchase without leaving the conversation. A few weeks later it was already redirecting the feature: users asked a thousand questions about products, compared laptops, yet rarely closed the sale inside the app.

The lesson is telling. An agent can read, sort, recommend, fill a cart; the till still belongs to the merchant. It is the merchant who accepts or declines the order, collects payment through its own provider, handles delivery and after-sales. The agent stops at the counter, and the counter keeps control. Where the promise dangles an errand run from end to end, reality reminds us that a transaction takes two, and the second party never signed.

Your credentials on the line

Handing your shopping to an agent means handing it your keys as well. To act in your place, the program logs in with your credentials, inside your account, with your saved payment methods. Amazon in fact argued the security risk this delegation of access creates. If the agent picks the wrong model, confirms the wrong quantity or is fooled by a fake storefront, it is your account that ordered, and your money that is gone.

To that exposure add a dependency. The more convenient the agent becomes, the less one keeps the habit of comparing for oneself, reading the listing, checking the price. The day the tool is blocked, cut off from a retailer or simply down, the delegated skill does not return at a snap. Time saved is paid for in reflexes lost, and the autonomy on offer sometimes looks like autonomy on loan.

The shopping agent renders a tangible service: it absorbs the tedious half of a task few people enjoy, and gives back a few minutes with every order. That is little or a lot, depending on how many chores you let it take. But the scene of March 2026 had the merit of clarity. Between you who give the order, the agent that carries it out and the store that guards its door, the question is not whether the machine can do the shopping. It already can. The real question is who, in the end, still holds the key to the till.