Should Amazon be allowed to block Meta's Muse agent from shopping on its site?

Amazon blocked Meta's Muse AI agent from its store, saying the agent accessed customer accounts without authorization and does not identify itself. Meta disputes Amazon's description of how Muse handles credentials. The block remains in place.

Three phone screens show Meta's Muse shopping for a stroller and asking for purchase approval.
Meta's promotional images show Muse comparing strollers and asking for approval before placing an order.

Case period:

Published by The Dispute Index editorial teamPublished Updated

Meta PlatformsAmazon

Overview

The fixed reference point for classification in this case is Amazon's decision, visible to users by September 20, 2026, to block Meta's Muse personal AI agent from shopping on Amazon.com. Responses are recorded against that block and the reasons Amazon gave for it. They are not recorded against Muse's privacy practices generally, other retailers' agent policies, or the wider debate over AI agents.

Meta launched Muse on September 8 as a free personal agent, with paid tiers, on iOS, Android, muse.ai and WhatsApp. It carries out multi-step tasks such as shopping, booking appointments and organizing calendars, using credentials the user provides. Meta says that where a service has no public API, the agent "can use the service through a browser the way you would," and that a separate monitoring agent called Sentinel must approve anything Muse sends to the internet. Muse reached the top of the U.S. iOS free app chart within days of launch.

GeekWire reported (opens in a new tab) that Amazon first asked Meta to voluntarily exclude Amazon.com from Muse's shopping features, that Meta did not do so, and that Amazon then deployed an anti-bot wall that stops Muse before it can load the search page. Amazon gave three reasons: it says it was not told in advance and never authorized the access, it says Muse does not identify itself as an automated agent while browsing, and it says the agent appears to capture and store customer login credentials. An Amazon spokesperson said that "third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate."

Meta disputes the credential claim. The company says Muse "has no visibility into people's passwords or payment methods" and that credentials "go into secure storage, so Muse can use them without seeing them." Meta announced a partnership with Shopify for some of Muse's shopping features. As of September 28, 2026, we could not locate a detailed public statement from Meta addressing the block itself, though Amazon said on September 21 that the two companies were in direct conversation.

The block follows a legal fight over the same question. Amazon sued Perplexity in November 2025 over its Comet browser shopping on Amazon. A federal judge granted Amazon a preliminary injunction in March 2026, but the Ninth Circuit vacated it on August 4 (opens in a new tab), ruling that the user, not the AI company, was the one accessing Amazon under federal anti-hacking law. The court denied Amazon's petition for rehearing on September 10, leaving contract and terms-of-service claims as Amazon's remaining avenue. The message Muse users now see cites Amazon's Conditions of Use rather than any hacking statute.

Other companies and executives have taken positions. Palo Alto Networks chief executive Nikesh Arora wrote on X (opens in a new tab) that every services, marketplace and commerce app will have to decide whether to open interfaces for consumer agents. Liat Ben-Zur, a former Microsoft vice president, told Fortune that the companies that control the rules of access will have enormous influence over whether agents actually work for the consumer. WION reported (opens in a new tab) that a researcher disclosed a vulnerability that could expose Muse's authentication system, which Amazon's defenders cite as support for the security rationale.

Silence is not a position. A refusal to comment, or a referral to an earlier statement, is recorded only where a source reports it.

Timeline

9 timeline entries on this page. Dates: November 1, 2025 to September 28, 2026

  1. November 2025

    1 event

    1. Amazon sues Perplexity over agent shopping on its store

      In November 2025, Amazon sued the AI search company Perplexity over its Comet browser letting users shop on Amazon, an early legal fight over third-party AI agents acting for customers.

      [01]Amazon Blocks Meta's Muse Agent From Shopping, And Signals a New Tollgate for Agent Commerce

      Yahoo Finance analysis recounting the block, Amazon's stated reasons, Meta's response, and the procedural history of Amazon's lawsuit against Perplexity, including the March 2026 preliminary injunction and the Ninth Circuit's August 4, 2026 decision vacating it.

  2. 120 days between recorded events

    March 2026

    1 event

    1. Federal court grants Amazon a preliminary injunction against Perplexity

      In March 2026, a federal judge granted Amazon a preliminary injunction in the Perplexity case. The Ninth Circuit later vacated it.

      [01]Amazon Blocks Meta's Muse Agent From Shopping, And Signals a New Tollgate for Agent Commerce

      Yahoo Finance analysis recounting the block, Amazon's stated reasons, Meta's response, and the procedural history of Amazon's lawsuit against Perplexity, including the March 2026 preliminary injunction and the Ninth Circuit's August 4, 2026 decision vacating it.

  3. 156 days between recorded events

    August 2026

    1 event

    1. Ninth Circuit vacates the Perplexity injunction

      The Ninth Circuit vacated the preliminary injunction, ruling that it was the users, not Perplexity, who were technically accessing Amazon under federal anti-hacking law. Contract and terms-of-service claims remained open to Amazon.

      [01]Amazon Blocks Meta's Muse Agent From Shopping, And Signals a New Tollgate for Agent Commerce

      Yahoo Finance analysis recounting the block, Amazon's stated reasons, Meta's response, and the procedural history of Amazon's lawsuit against Perplexity, including the March 2026 preliminary injunction and the Ninth Circuit's August 4, 2026 decision vacating it.

  4. 35 days between recorded events

    September 2026

    6 events

    1. Meta launches the Muse personal AI agent

      Incident

      Meta launched Muse, a personal AI agent that carries out multi-step tasks such as shopping and booking appointments, on iOS, Android, muse.ai and WhatsApp. It reached the top of the U.S. iOS free app chart within days.

      [02]Meta's Muse AI is exploding in popularity, and drawing heated backlash

      Fortune report on Muse's rise to the top of the U.S. iOS free app chart, Amazon's block and statement, Meta's Shopify partnership, and reactions from Nikesh Arora on X and Liat Ben-Zur in an interview.

    2. Ninth Circuit denies Amazon's rehearing petition

      The Ninth Circuit denied Amazon's petition for rehearing in the Perplexity case, leaving terms-of-service enforcement as Amazon's main remaining lever against outside agents.

      [03]Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping

      GeekWire report that Amazon blocked Meta's Muse personal AI agent from shopping on Amazon.com, with Amazon's stated reasons (no advance notice, no self-identification, credential handling), the text of the popup shown to users, Meta's response about credential storage, and the companies' prior contacts before the block.

    3. Amazon blocks Muse from Amazon.com

      Incident

      Amazon deployed an anti-bot wall blocking Meta's Muse agent from shopping on Amazon.com. Users saw a message that continued access by an unauthorized AI agent violates Amazon's Conditions of Use. Amazon said it had first asked Meta to voluntarily exclude Amazon and Meta did not do so.

      [03]Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping

      GeekWire report that Amazon blocked Meta's Muse personal AI agent from shopping on Amazon.com, with Amazon's stated reasons (no advance notice, no self-identification, credential handling), the text of the popup shown to users, Meta's response about credential storage, and the companies' prior contacts before the block.

    4. Amazon defends the block and says it is talking with Meta

      Reaction

      An Amazon spokesperson said third-party buying agents should operate openly and respect service provider decisions, and said the company was in direct conversation with Meta. Meta had disputed Amazon's credential claims but had not issued a detailed public statement about the block.

      [03]Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping

      GeekWire report that Amazon blocked Meta's Muse personal AI agent from shopping on Amazon.com, with Amazon's stated reasons (no advance notice, no self-identification, credential handling), the text of the popup shown to users, Meta's response about credential storage, and the companies' prior contacts before the block.

      [02]Meta's Muse AI is exploding in popularity, and drawing heated backlash

      Fortune report on Muse's rise to the top of the U.S. iOS free app chart, Amazon's block and statement, Meta's Shopify partnership, and reactions from Nikesh Arora on X and Liat Ben-Zur in an interview.

    5. Executives publicly frame the stakes of agent access

      Reaction

      Palo Alto Networks chief executive Nikesh Arora wrote on X that every services, marketplace and commerce app will have to decide whether to open interfaces to consumer agents. Former Microsoft corporate vice president Liat Ben-Zur told Fortune that whoever controls the rules of access will influence whether agents work for consumers.

      [02]Meta's Muse AI is exploding in popularity, and drawing heated backlash

      Fortune report on Muse's rise to the top of the U.S. iOS free app chart, Amazon's block and statement, Meta's Shopify partnership, and reactions from Nikesh Arora on X and Liat Ben-Zur in an interview.

    6. Researcher reports a Muse authentication vulnerability

      Claim

      WION reported that a researcher had disclosed a vulnerability said to be capable of exposing Muse's authentication system, adding a security claim to the dispute over Amazon's block.

      [04]Meta Muse AI agent: Why Amazon blocked it and why hackers are now a concern

      WION report on the Amazon block and on a researcher's disclosure of a vulnerability said to be capable of exposing Muse's authentication system.

Response record

Responses

Latest recorded positions: 4. Dates: September 20, 2026 to September 22, 2026

Choose one response filter, or select All responses to see the full record.

1 response on this page

  1. Meta PlatformsDirectly involved
    "Muse "has no visibility into people's passwords or payment methods," and credentials a user shares "go into secure storage, so Muse can use them without seeing them, including passwords a person types into the browser themselves.""
    Open source (opens in a new tab)Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping
    Denied

    Case context: Should Amazon be allowed to block Meta's Muse agent from shopping on its site?

    Read more

    Meta denied Amazon's suggestion that Muse captures customer credentials, saying the agent has no visibility into passwords or payment methods and that credentials are kept in secure storage the agent can use without seeing them.

    Role at the time: Meta, in its public description of Muse's security model

    Before the statement

    Amazon told reporters that Muse appears to capture and store customer login credentials and does not identify itself as an automated agent. Meta's statement about credential handling predates the block; GeekWire republished it in coverage of the dispute.

    After the statement

    As of September 28, 2026, we could not locate a detailed public statement from Meta addressing the block itself. Meta announced a partnership with Shopify for some of Muse's shopping features.

    Why this label?

    Amazon's stated reasons include an apparent capture and storage of customer credentials; Meta's statement directly denies that characterization of how Muse works.

    This label describes the statement's response within the context above.

Sources

(4)

Reporting

Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping

About this source

GeekWire report that Amazon blocked Meta's Muse personal AI agent from shopping on Amazon.com, with Amazon's stated reasons (no advance notice, no self-identification, credential handling), the text of the popup shown to users, Meta's response about credential storage, and the companies' prior contacts before the block.

Author
GeekWire
Published
Accessed

Reporting

Meta Muse AI agent: Why Amazon blocked it and why hackers are now a concern

About this source

WION report on the Amazon block and on a researcher's disclosure of a vulnerability said to be capable of exposing Muse's authentication system.

Author
WION
Published
Accessed
Archived copy (opens in a new tab)

Analysis

Amazon Blocks Meta's Muse Agent From Shopping, And Signals a New Tollgate for Agent Commerce

About this source

Yahoo Finance analysis recounting the block, Amazon's stated reasons, Meta's response, and the procedural history of Amazon's lawsuit against Perplexity, including the March 2026 preliminary injunction and the Ninth Circuit's August 4, 2026 decision vacating it.

Author
Yahoo Finance
Published
Accessed

Reporting

Meta's Muse AI is exploding in popularity, and drawing heated backlash

About this source

Fortune report on Muse's rise to the top of the U.S. iOS free app chart, Amazon's block and statement, Meta's Shopify partnership, and reactions from Nikesh Arora on X and Liat Ben-Zur in an interview.

Author
Fortune
Published
Accessed
Archived copy (opens in a new tab)

The newsletter

Follow disputes like this one.

New cases and significant updates to the record, in your inbox. Free.

You’ll confirm your subscription on Substack.