AgentsAutonomy & tool use
Amazon, Banks and Travel Sites Block Consumer AI Agents Such as Meta's Muse
Amazon, Yelp, Delta, JPMorgan Chase and Schwab have confirmed blocking consumer AI agents such as Meta's Muse. A federal appeals court weakened anti-hacking claims against agents that users direct, so sites are turning to terms of service, licensing deals, partnerships and bot detection.
From the The Verge · AI article of October 17, 2026 and cited sources: Major consumer sites are refusing unauthorized agents. [1] [7] [8] [10]
SOURCES[1] Websites are closing their doors to AI agents theverge.com[7] TechCrunch: Meta's AI agent blocked from Amazon.com techcrunch.com[8] Bloomberg: Amazon Blocks Meta's Muse bloomberg.com
AT Pulse research deskPublished · Updated · 5 min read · AI-assisted analysisAI-assisted, not human-edited. Methodology Corrections Who owns this site
- Original source
- The Verge · AI article, independent perspective
- Brief by
- AT Pulse research desk AI-assisted; publisher and contact on the desk page
- When
- October 17, 2026 article published
- Covered
- Oct 18 edition
- Evidence
- 11 sources across 8 sites
- 1Websites are closing their doors to AI agentstheverge.com
- 2Trending Topics: U.S. Banks Lock Out A.I. Agentstrendingtopics.eu
- 3Pearl Cohen: Ninth Circuit Vacates Injunctionpearlcohen.com
- 4MediaPost: Appeals Court Lifts Perplexity Banmediapost.com
- 5Tech Times: Amazon Blocks Meta Muse Using Standards It…techtimes.com
- 6Let's Data Science: Cloudflare Blocks Mixed-Use Crawlersletsdatascience.com
RisingHow it’s measured
Hacker News · 5 likes · 1 comment
Reach blends public engagement (views, likes, comments, shares, stars) from the platforms where the story or its original source lives: YouTube, Hacker News, GitHub, Substack and similar. A video and the article written from its transcript share one score, taken from the video. Platforms with no data are left out rather than counted as zero, and the age of a story never lowers its score.
Major consumer sites are refusing unauthorized agents. Amazon showed Muse users notices saying an unauthorized AI agent breaks its Conditions of Use. Yelp, Delta, JPMorgan and Schwab have confirmed blocks on agents from Meta, xAI, OpenAI and Instinct. The banks drew the line at agents that move client money. [1] [7] [8] [10]
The legal route is weaker than sites hoped. In August, the Ninth Circuit lifted Amazon's injunction against Perplexity's Comet shopping agent. It found Amazon unlikely to win under the federal anti-hacking law, partly because Comet runs on the user's own device. That leaves contract terms as the main lever. [3] [4]
Access is becoming something agents negotiate rather than assume. Yelp lets in only agents that pay for its data licensing. Delta says no partnership exists for third-party booking. Meta's retail partnerships and Shopify's open storefronts let agents in. Schwab offers read-only balance access through MCP servers. [1] [2] [9]
Identification is the technical flashpoint. Amazon objects that Muse does not identify itself and appears to store customer credentials. Critics argue an agent using a user's own IP address and cookies cannot be told apart from the user. Cloudflare now pushes AI providers to run separate bots for search, agents and training. [5] [6] [8]
Confirmed blocks show that what agents can do on the open web now depends heavily on each site's permission. A likely but unproven implication is that builders without licensing deals or partnerships will face patchy access.
Read the full assessment
Users may also face more human-verification steps.
Executive brief
Some of the largest consumer sites now block AI agents outright. Schwab's CEO said the firm blocks unauthorized agents, including Meta's Muse, "tens and twenties" of times a week (Trending Topics). The Verge reports that Yelp, Delta, JPMorgan Chase, Schwab and Amazon have confirmed blocks on agents from Meta, xAI, OpenAI and Instinct (The Verge). The legal picture points the other way. In August a federal appeals court lifted Amazon's ban on Perplexity's shopping agent. Sites are therefore relying on terms of service, paid licensing, partnerships and anti-bot systems.
What changed and event timeline
Appeals court lifts the Perplexity ban
The Ninth Circuit said Amazon was unlikely to win its anti-hacking (CFAA) claim, calling the Comet Assistant "a tool, not a person." The case went back to the lower court (;).
Meta launches Muse
Meta released Muse, a consumer agent that can shop, book and handle accounts for users. It became the main target of the blocks that followed ().
Cloudflare changes its crawler defaults
By default, Cloudflare now blocks crawlers that collect data for both search and AI training from ad-supported pages. It is pushing AI providers to run separate bots for search, agents and training ().
Amazon blocks Muse
Muse users saw pop-ups saying that an "unauthorized AI agent" violates Amazon's Conditions of Use (;).
Yelp and Delta explain their positions
Yelp only allows agents that pay for its data licensing program. Delta said it has no partnership that lets third-party agents book its flights ().
Banks say agents can read but not move money
Schwab CEO Rick Wurster said the firm blocks unauthorized agents that try to move client funds. JPMorgan's Jamie Dimon warned against "rogue agents" (;).
Capabilities and access
- Affected agents: Meta Muse, xAI Grok, OpenAI Dots and Instinct. None of the reviewed sources names the model versions behind them (The Verge).
- Sites that allow agents:
- Meta has partnerships that let Muse shop at Walmart, Gap, Sephora and Best Buy, and Shopify has opened its storefronts to agents (The Verge).
Read the full section
- Affected agents: Meta Muse, xAI Grok, OpenAI Dots and Instinct. None of the reviewed sources names the model versions behind them (The Verge).
- Sites that allow agents:
- Meta has partnerships that let Muse shop at Walmart, Gap, Sephora and Best Buy, and Shopify has opened its storefronts to agents (The Verge).
- Zillow allows consumer agents, and eBay does not ban all shopping agents (TechCrunch).
- Read-only access: Schwab lets outside AI tools view balances through its MCP servers but not make trades (Trending Topics).
Technical analysis for researchers and developers
- How Amazon objects: Amazon says Muse does not identify itself while it browses and appears to store customer credentials.
- The detection limit: Elon Musk argued that an agent using the user's own IP address and cookies cannot be told apart from the user (Tech Times).
- Why architecture matters legally: The Ninth Circuit relied on Comet running locally on the user's device.
Read the full section
- How Amazon objects: Amazon says Muse does not identify itself while it browses and appears to store customer credentials. Amazon's terms require third-party agents to identify themselves (Bloomberg).
- The detection limit: Elon Musk argued that an agent using the user's own IP address and cookies cannot be told apart from the user (Tech Times).
- Why architecture matters legally: The Ninth Circuit relied on Comet running locally on the user's device. It distinguished that from direct server-to-server access, so cloud-hosted agents may face different legal analysis (Pearl Cohen).
- Standards work: Meta, Walmart, Stripe, Sierra and others are drafting an open standard for how agents communicate with businesses (TechCrunch).
Claims and evidence
- Confirmed by companies: Yelp, Delta, JPMorgan and Schwab confirmed their positions on the record (The Verge).
- User reports only: Blocks at Cars.com and Amtrak, and Google flagging Muse accounts, come from user reports, including Reddit. No company has confirmed them.
- Schwab's block count comes from its own CEO (Bloomberg).
Read the full section
- Confirmed by companies: Yelp, Delta, JPMorgan and Schwab confirmed their positions on the record (The Verge).
- User reports only: Blocks at Cars.com and Amtrak, and Google flagging Muse accounts, come from user reports, including Reddit. No company has confirmed them.
- Schwab's block count comes from its own CEO (Bloomberg).
- Cloudflare's crawl-to-referral figures are Cloudflare's own numbers: Google 14:1, OpenAI 1,700:1, Anthropic 73,000:1 (Let's Data Science).
Context and prior work
- Amazon v. Perplexity: Amazon banned and sued Perplexity over its shopping agent, then filed an amended complaint after losing the appeal (The Verge).
- Crawler controls: Cloudflare introduced one-click AI-crawler blocking in 2025 and is piloting pay-per-crawl, which carries the earlier fight over training-data scraping into agent access (Let's Data Science).
Limitations, safety and contested findings
- Motives are disputed. Banks and Amazon cite security and liability. Perplexity says Amazon is really protecting ad views (The Verge).
- Amazon's consistency is questioned.
- The ruling is narrow. The Ninth Circuit did not decide the tort claims or whether terms of service can be enforced against agents (Pearl Cohen).
Read the full section
- Motives are disputed. Banks and Amazon cite security and liability. Perplexity says Amazon is really protecting ad views (The Verge). Trending Topics estimates that agents moving idle deposits could cost large banks about $47B a year (Trending Topics).
- Amazon's consistency is questioned. Tech Times argues Amazon's own "Buy for Me" agent visits other retailers on an opt-out basis, without first asking their consent (Tech Times).
- The ruling is narrow. The Ninth Circuit did not decide the tort claims or whether terms of service can be enforced against agents (Pearl Cohen).
Business and practitioner implications
- Access is becoming something you negotiate. It is arriving through licensing (Yelp), partnerships (Meta with retailers, Shopify) or read-only APIs (Schwab's MCP servers).
- Agent builders should:
- Have agents identify themselves.
Read the full section
- Access is becoming something you negotiate. It is arriving through licensing (Yelp), partnerships (Meta with retailers, Shopify) or read-only APIs (Schwab's MCP servers).
- Agent builders should:
- Have agents identify themselves.
- Avoid storing user credentials.
- Expect anti-bot systems to block them even where no ban exists.
- For sites, contract terms are now the main lever. Under the Ninth Circuit's reasoning, anti-hacking law gives little protection against agents a user directs from their own device.
- Usefulness takes a hit. EquiStamp CEO Chris Canal says the blocks lower the perceived value of agents and will add more human-verification steps for everyone (The Verge).
The source trail.
Sources (11)
Websites are closing their doors to AI agents
Article text retrieved; extracted text may omit tables or interactive elements.
theverge.com