pilcrow
← All research Pilly leans over a shop counter and hands a small bag to the first of a line of small robots waiting on the other side.

An AI agent can now legally shop on your website

A US federal appeals court, 4 August 2026: "the Assistant is a tool, not a person."

Ninth Circuit Court of Appeals · August 24, 2026 · 3 min read


In March 2026 Amazon won a court order blocking Perplexity’s shopping agent from making purchases on Amazon on behalf of logged-in users. It looked like the moment the door closed on agentic commerce.

On 4 August 2026 the Ninth Circuit vacated it.

The reasoning matters more than the outcome:

“It is the user who ‘accesses’ Amazon’s computers, with the help of the Assistant to carry out specific acts on Amazon.com.”

and

“the Assistant is a tool, not a person”

Amazon was held unlikely to succeed on its claims under the Computer Fraud and Abuse Act. The court was careful to preserve the contractual route — “This outcome does not impair Amazon’s ability to regulate access to Amazon.com via private terms of service for its users” — but the federal computer-crime path is closed.

Translated: keeping an AI agent off your site is now a terms-of-service and technical question, not a criminal one. And more to the point, agents that actually transact have stopped being hypothetical.

Google’s AI Mode books restaurants, appointments and event tickets through named partners — OpenTable, Resy, Tock, Ticketmaster, StubHub, and for service businesses Booksy, Fresha and Vagaro. At I/O 2026 Google announced expansion to local experiences and services in the US, including Google calling businesses on a user’s behalf for home repair, beauty and pet care, controlled through the Business Profile settings.

That last one deserves a second read. For a category of local business, the “customer” placing the first call may be a machine, and the settings governing whether it can reach you live in a profile most owners have not opened in two years.

So what does a small business actually need to be reachable by a transacting agent? As of today, four things, and the fourth is where it usually breaks.

Be on a booking platform an assistant already integrates with. Booksy, Fresha, Vagaro, OpenTable, Resy, Tock. For most local service businesses this is the only route that exists right now, and it is not a technical project — it is a decision about which platform you use.

Keep the Google Business Profile complete, current, and correctly configured for calls. That is the surface Google’s calling agent uses. Hours including holidays, services listed, and the call-handling settings actually reviewed.

A structured product feed, if you sell goods. Merchant Center for Google’s protocol; an application for ChatGPT’s.

Do not block user-triggered agents at your firewall. ChatGPT-User, Perplexity-User and meta-externalfetcher all state that robots.txt may not apply to them, because a person initiated the request. What actually stops them is the security layer at your edge — and that is what ends a transaction halfway through, silently, with no error anyone sees. Note that Claude-User behaves differently: Anthropic commits to honouring robots.txt for it.

And the honest part. Direct integration with the agentic commerce protocols is not realistically available to a small business without a platform partner. OpenAI’s product feed onboarding is “currently available to approved partners” and requires an application. Google’s simplified onboarding through Merchant Center is described as “rolling out over the coming months” with no adoption figures published. Anyone selling you a direct protocol integration today is describing something you cannot buy.

One more open question, and nobody has answered it. Claude in Chrome became generally available on 26 August 2026 — an agent that reads pages, clicks links, fills forms and uses your existing logins. Anthropic publishes no user-agent for it, no site-owner controls and no robots.txt guidance. If it visits your site, you currently have no documented way to identify it or to say no. That is a genuine gap, and we would rather flag it than pretend the picture is complete.

Related

Free scan, no card required

Now find out where your own business stands.

That was the research. The free report runs the buying questions from your industry through the AI systems and shows you who gets named instead of you.

Your services page rather than your homepage, if you have one. That's the page an AI reads when someone asks what you sell.

We'll email you the report. No card, no call required to get it.