Oct 22 edition/Reporting & analysis
AgentsBusinessPolicySafety

AgentsAutonomy & tool use

Walmart opens an MCP-based checkout to AI shopping agents a month after Amazon blocked Meta's Muse

Walmart has introduced an MCP-based Agent Gateway, per-agent profiles with spending caps, and formal agent terms, inviting third-party AI shoppers in just a month after Amazon used its customer contract to cut off Meta's Muse agent.

From the TechCrunch AI article of October 21, 2026 and cited sources: Walmart announced its agent program on October 21, 2026. [1] [6]

SOURCES[1] TechCrunch: While Amazon blocks AI agents, Walmart rolls… techcrunch.com[6] Unite.AI: Walmart Introduces Agent Profiles, Gateway for… unite.ai

AI-assisted, not human-edited. Methodology Corrections Who owns this site

KEY FACTS
What happened
Walmart announced its agent program on October 21, 2026. [1] [6]
Original source
TechCrunch AI article, independent perspective
Brief by
AT Pulse research desk AI-assisted; publisher and contact on the desk page
When
October 21, 2026 article published
Evidence
10 sources across 10 sites

Reach: not measured yet

Illustration from TechCrunch: Walmart opens an MCP-based checkout to AI shopping agents a month after Amazon blocked Meta's Muse
Image: TechCrunch — Original article ↗
THE CORE IDEAS3 TAKEAWAYS
01

Walmart announced its agent program on October 21, 2026. It covers Walmart and Sam's Club. The Agent Gateway is an invite-only beta MCP server that lets approved agents search inventory and buy on a user's behalf. Each agent gets its own profile. By default, the shopper approves every order, or they can set a cap, reportedly $50, $100 or $200. Agents can't see card data or change payment methods. Agent orders that go wrong are covered by normal returns. Customers are due to get profiles in November, and a Walmart+ membership isn't required. [1] [6]

02

Amazon went the other way. On September 20 it blocked Meta's Muse, saying Meta never notified it, Muse doesn't identify itself, and Muse appears to capture customer credentials. Meta disputes the credential claim. Amazon enforced the block through its Conditions of Use, which require agents to name themselves, not mimic human behavior and not get around CAPTCHAs. Robots.txt couldn't do the job because Muse wasn't one of Meta's documented crawlers. [3] [4] [7] [10]

03

Contracts are replacing anti-hacking law as the main enforcement tool. Search Engine Journal reports that an August Ninth Circuit ruling in Amazon's case against Perplexity weakened Amazon's anti-hacking claims against agents. Since then, retailers' terms of use have been doing that enforcement work. [3]

WHY IT MATTERS

The evidence shows the two largest US retailers treating outside agents in opposite ways.

Read the full assessment

For builders, the likely result is that hidden browser automation risks being blocked at both, while agents that identify themselves, stay within caps and get permission have an official route in at Walmart.

Walmart opens its checkout to AI shopping agents a month after Amazon locked them out

Executive brief

Walmart is building a formal way for outside AI agents to shop its stores. Amazon is going the other way and blocking them. On October 21, 2026, Walmart announced three things: an Agent Gateway built on MCP (the Model Context Protocol), per-agent "Agent Profiles" with spending caps, and written terms that agents must follow. Walmart's normal returns process covers agent purchases, including when an agent doesn't act as intended. One month earlier, Amazon cut off Meta's Muse agent. It used its customer contract to do so, because robots.txt couldn't stop Muse. The two largest US retailers now treat third-party agents in opposite ways.

What changed and event timeline

  1. Court ruling goes against Amazon in its Perplexity case

    Search Engine Journal reports that a Ninth Circuit decision weakened Amazon's anti-hacking-law claims against agents. That pushed Amazon to enforce through its contract terms instead.

  2. Amazon blocks Meta's Muse

    Amazon confirmed the block to GeekWire. Its stated reasons: Meta never told Amazon, Muse doesn't identify itself, and Muse appears to capture customer credentials.

  3. Meta names Muse's retail partners

    Walmart, Gap, Sephora, Wayfair and Best Buy were announced as partners about two weeks after Muse launched on Sep 8.

  4. Walmart launches Agent Gateway, Agent Profiles and agent terms

    CEO John Furner announced them at the Masters of Scale Summit. They cover both Walmart and Sam's Club.

  5. (planned): Agent Profiles reach customers

    Any Walmart account holder can use them; a Walmart+ membership is not required.

Capabilities and access

  • Agent Gateway: an MCP server that lets approved agents search inventory and buy for a user.
  • Agent Profiles: one profile per agent, created the first time that agent shops through the gateway.
  • Existing channels: Walmart's own Sparky assistant, plus Muse, ChatGPT and Gemini integrations (Unite.AI).
Read the full section
  • Agent Gateway: an MCP server that lets approved agents search inventory and buy for a user. It is in beta, open to companies and developers by invitation only (Unite.AI).
  • Agent Profiles: one profile per agent, created the first time that agent shops through the gateway. The shopper either approves each order or sets a cap. Reported cap options are $50, $100 or $200, and approving every purchase is the default (Unite.AI).
  • Existing channels: Walmart's own Sparky assistant, plus Muse, ChatGPT and Gemini integrations (Unite.AI).

Technical analysis for researchers and developers

  • Structured access instead of scraping: agents connect through MCP and get product and fulfillment data directly (Unite.AI).
  • Delegated identity: Walmart compares a profile to adding an authorized user to a credit card. Agent orders are labeled separately and capped (TechCrunch).
  • Limited data access: agents get only what the task needs.
Read the full section
  • Structured access instead of scraping: agents connect through MCP and get product and fulfillment data directly (Unite.AI).
  • Delegated identity: Walmart compares a profile to adding an authorized user to a credit card. Agent orders are labeled separately and capped (TechCrunch).
  • Limited data access: agents get only what the task needs. They never see card data, can't add or change payment methods, and can't read full purchase history (Unite.AI).
  • Missing documentation: no public MCP tool schema, authentication flow or rate-limit details have been published.

Claims and evidence

  • Agents can shop for "usual" items without seeing personal data or history.
  • Agents see the same prices humans see. Also Walmart's claim (Unite.AI).
  • This is Amazon's allegation, made without evidence shown to reporters (Search Engine Journal).
Read the full section
  • Agents can shop for "usual" items without seeing personal data or history. This is Walmart's own claim, and no independent test has confirmed it (TechCrunch).
  • Agents see the same prices humans see. Also Walmart's claim (Unite.AI).
  • Muse captures credentials. This is Amazon's allegation, made without evidence shown to reporters (Search Engine Journal). Meta says the credentials sit in secure storage that the model never reads (Infosecurity Magazine).

Context and prior work

  • Walmart's 2025 "super agents" plan: it named four agents, including Sparky for shoppers and Marty for partners (Digital Commerce 360; Walmart).
  • Amazon's agent terms: its Conditions of Use now include an Agents section. Reported update dates for these terms differ between sources.
Read the full section
  • Walmart's 2025 "super agents" plan: it named four agents, including Sparky for shoppers and Marty for partners (Digital Commerce 360; Walmart).
  • Amazon's agent terms: its Conditions of Use now include an Agents section. Agents must name themselves in the user-agent string, must not mimic human behavior or get around CAPTCHAs, and must answer honestly if asked whether they are a bot (Conduct Atlas). Reported update dates for these terms differ between sources.

Limitations, safety and contested findings

  • Shared identity problem: Infosecurity Magazine argues there is no common standard for proving who or what an agent is across companies.
  • Robots.txt can't do the job: Muse wasn't listed among Meta's documented crawlers, so there was nothing to name in a block rule (Search Engine Journal).
  • Walmart's protections are untested: they are announced but not yet independently evaluated, and the gateway is still an invite-only beta.
Read the full section
  • Shared identity problem: Infosecurity Magazine argues there is no common standard for proving who or what an agent is across companies. It calls for four controls: separate agent identities, policy checks run outside the agent, human approval for high-stakes actions, and audit logs that can't be altered (Infosecurity Magazine).
  • Robots.txt can't do the job: Muse wasn't listed among Meta's documented crawlers, so there was nothing to name in a block rule (Search Engine Journal).
  • Walmart's protections are untested: they are announced but not yet independently evaluated, and the gateway is still an invite-only beta.

Business and practitioner implications

  • For agent builders: Walmart gives approved agents an official route in.
  • For retailers: Walmart's package is a pattern others can copy: published agent terms, per-agent profiles with caps, and returns coverage when an agent errs.
  • For legal teams: after the Perplexity ruling, contract terms are doing the enforcement work that anti-hacking claims used to do (Search Engine Journal).
Read the full section
  • For agent builders: Walmart gives approved agents an official route in. Amazon requires agents to identify themselves and get permission, so stealthy browser automation now risks being blocked at both.
  • For retailers: Walmart's package is a pattern others can copy: published agent terms, per-agent profiles with caps, and returns coverage when an agent errs. It positions Walmart as the store that agent platforms like Muse can safely send shoppers to (TechCrunch).
  • For legal teams: after the Perplexity ruling, contract terms are doing the enforcement work that anti-hacking claims used to do (Search Engine Journal).
FOLLOW THE EVIDENCE

The source trail.

Sources (10)
A LITTLE LESS NOISE. A LOT MORE CONTEXT.

Stay curious.
Follow the evidence.

Independent perspectives, the original sources, and room for the questions that don't have easy answers.

How we build the brief
Connect with us

Find us where you already read.