Why did Amazon block Meta Muse?

Amazon gave four reasons on September 20-21, 2026: Meta never told Amazon that Muse would shop on Amazon.com; the agent does not identify itself as an AI agent when it browses, so it looks like a human customer; it bypasses the personalization and other features of Amazon's shopping experience; and it appears to capture and store customer credentials and scrape account data, which Amazon says creates privacy and security risks. Amazon says it first asked Meta to voluntarily exclude Amazon from Muse, Meta declined, and Amazon then began showing Muse users the message 'Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed.'

Is Amazon blocking all AI shopping agents?

Amazon has blocked or fought every major third-party shopping agent over the past year: it sued Perplexity over its Comet browser, moved to block Google's and OpenAI's shopping agents, and now Meta's Muse, which launched September 8, 2026. Amazon's stated principle is that apps buying on behalf of customers must 'operate openly and respect service provider decisions about whether or not to participate,' like food-delivery apps with restaurants or travel agencies with airlines. Amazon's own Rufus assistant and Buy for Me feature remain the sanctioned agentic paths inside Amazon, and Amazon earned more than $68 billion in advertising last year from people browsing its pages.

Can Amazon legally block Muse after losing the Perplexity case?

Amazon won a preliminary injunction against Perplexity's Comet in March 2026 but lost it on August 4, 2026, when the Ninth Circuit ruled that the user, not the AI company, is the party accessing Amazon's computers under the federal anti-hacking law, and denied rehearing on September 10. The ruling left contract and terms-of-service claims open, which is why the Muse block message cites Amazon's Conditions of Use rather than accusing anyone of hacking. Amazon says it is in direct conversation with Meta and declined to say whether it will sue.

What is Meta's response and can Muse users still shop elsewhere?

Meta did not comment on the night of the block. Its published position is that Muse 'has no visibility into people's passwords or payment methods' and that credentials go into secure storage it can use without seeing. Muse still shops on other retailers, and on September 21, 2026 Shopify CEO Tobias Lütke announced a partnership to allow Muse agentic checkout in Shopify stores. Muse purchases run through Link by Stripe with one-time-use card numbers and Link's purchase protections.

Quick Answer

Why Amazon Blocked Meta's Muse AI Agent (September 2026)

Published: September 22, 2026

The short answer

Amazon blocked Meta’s Muse agent from shopping on Amazon.com on the night of Sunday, September 20, 2026 — twelve days after Muse launched — because Meta never asked, the agent doesn’t identify itself, it skips Amazon’s shopping experience, and Amazon says it stores customer credentials. It is the latest move in a year-long campaign by Amazon to keep every outside shopping agent off its store, and the tactic (a Conditions-of-Use notice rather than a lawsuit) is shaped by a Ninth Circuit ruling Amazon lost six weeks earlier.

What users see

Anyone asking Muse to buy something on Amazon now gets a pop-up from Amazon:

“Continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, to which our customers have agreed.”

Note the framing: Amazon is not accusing Meta of hacking. It is telling its own customers that using Muse on Amazon breaches the terms they accepted.

Amazon’s four stated reasons

From Amazon’s statements to GeekWire and CNBC on September 20-21, 2026:

No notice, no agreement. Meta did not tell Amazon that Muse would access its store. Amazon says third-party apps that purchase from other businesses “should operate openly and respect service provider decisions about whether or not to participate,” comparing them to delivery apps working with restaurants and travel agencies working with airlines.
The agent is undisclosed. Muse does not identify itself as an AI agent when it browses, so an “undisclosed third party” is moving through customer accounts, order history and transactions without Amazon’s knowledge.
It bypasses the shopping experience. Muse skips Amazon’s personalization and other features — which, unstated, includes sponsored placements in a business that made more than $68 billion in ad revenue last year.
Credential and data risk. Amazon says Muse “appears to capture and store customer credentials and scrape account data.” Meta’s position is the opposite: Muse “has no visibility into people’s passwords or payment methods”; credentials sit in secure storage on the user’s dedicated VM that the agent can use but not read.

Amazon says it requested that Meta remove Amazon from the Muse experience, Meta declined, and the block followed. Amazon is “in direct conversation with Meta” and would not say whether it will sue.

Why this matters more than a normal bot block

Amazon and Meta are partners. Amazon products have been purchasable inside Facebook and Instagram since 2023, and in April 2026 Meta signed a multibillion-dollar deal to run agentic AI workloads on Amazon’s Graviton chips. Blocking a partner’s flagship consumer product signals how central the “who owns the customer relationship” question has become.

Muse is also not a niche tool. It logged 2.5 million downloads in 13 days, overtook ChatGPT as the top free iOS app in the US on September 18, and Meta stock jumped 11% on September 21. Amazon is refusing the fastest-growing consumer agent in the country.

The legal backdrop: Amazon v. Perplexity

Date	Event
Late 2025	Amazon sues Perplexity over its Comet browser shopping on Amazon
March 2026	Amazon wins a preliminary injunction blocking Comet
August 4, 2026	Ninth Circuit reverses: under federal anti-hacking law the user, not the AI company, is the one accessing Amazon’s computers
September 10, 2026	Ninth Circuit denies Amazon’s petition for rehearing
September 20, 2026	Amazon blocks Muse — citing Conditions of Use, not hacking

The Ninth Circuit closed the Computer Fraud and Abuse Act route but explicitly left contract and terms-of-service claims open. That is why the Muse notice is addressed to customers and cites the Conditions of Use: Amazon is building the record for a breach-of-contract theory, not a hacking one. Meanwhile Amazon has also moved to block shopping agents from Google and OpenAI.

Meta’s side and the Shopify counter-move

Meta did not respond on launch night. Its architecture argument — per-user Muse Secure VM, a Sentinel agent gating every outbound action, credentials the agent cannot read, Link-by-Stripe one-time card numbers, purchase protections — is precisely the “we are safer than a human typing a password” case that Amazon disputes. See What is Meta Muse? for the full design.

The same day Amazon closed the door, Shopify opened one: CEO Tobias Lütke announced on September 21 that Shopify is partnering with Meta to allow Muse agentic checkout across its merchants. Shop Pay was already listed as a coming Muse payment method. Two of the largest commerce platforms in the US have now taken opposite positions on the same agent within 24 hours.

What happens next

For Muse users: Amazon shopping through Muse is dead until Meta and Amazon reach terms. Every other retailer, and all Shopify stores, still work.
For Meta: the options are to negotiate a disclosed, sanctioned integration (the path Amazon says it wants), to exclude Amazon, or to litigate on the back of the Perplexity precedent.
For merchants: the fight is a preview. Agents that identify themselves cryptographically (Cloudflare’s Web Bot Auth, live since July 1, 2026) and platforms that opt in (Shopify) versus terms-of-service blocks (Amazon) are the two models emerging. How to set your own policy: How to control AI shopping agents on your website.
For the market: Visa’s Trust Index and the Ninth Circuit both point the same way — the user is the principal, the agent is the tool, and the battleground is contract terms and ad revenue, not hacking law. Background: What is agentic commerce?