Amazon said on September 20, 2026 that it has cut Meta's new Muse personal agent off from buying on Amazon.com for customers, after an unsuccessful request that Meta leave the store out of the product, according to GeekWire.

In Short

Amazon said on September 20, 2026 that Meta's new Muse assistant can no longer place orders on Amazon.com for people, because Meta did not agree to leave Amazon out. It matters because Amazon's advertising business, worth more than $68 billion last year, depends on people browsing its pages, and an agent that shops on a person's behalf can skip them. For now, people who try shopping on Amazon through Muse see a message saying the agent is not allowed, and Amazon says it is talking directly with Meta.

What Amazon said, and what users now see

The dispute is the latest over how agentic AI software may act for a person on retailers' pages. According to GeekWire, which reported the matter on September 20, 2026, Amazon first tried to get Meta to exclude Amazon.com from Muse voluntarily. That attempt failed. As of Sunday night, people trying to use Muse to shop on Amazon were shown a popup reading: "Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed."

Amazon's grievance has four parts, according to GeekWire's account of the company's position. It never agreed to Muse operating on its store. Meta did not tell Amazon that Muse would reach it. The agent does not identify itself when it browses. And it appears to capture and store customer credentials, which Amazon says could create privacy and security risks.

An Amazon spokesperson set out the principle in a statement: third-party applications that offer to make purchases on behalf of customers from other businesses "should operate openly and respect service provider decisions about whether or not to participate." The statement continued: "Agentic third-party applications such as Muse have the same obligations, and we've requested that Meta remove Amazon from the experience."

Amazon also reached for analogies, according to GeekWire. Other services that buy on a customer's behalf typically do so with the merchant's agreement, the company said, citing food delivery apps and the restaurants whose orders they take, and online travel agencies and the airlines they book with. Agents that operate openly, in Amazon's account, help keep the customer experience safe and reliable.

Meta did not immediately respond to a request for comment on Sunday night. Amazon said the same night that it is in direct conversation with Meta about the issue. Asked whether it would consider legal action, the company declined to comment.

How Muse reaches a store it has no deal with

Meta released Muse on September 8, 2026, according to GeekWire, as a personal agent that carries out multistep tasks rather than answering one-off questions. It connects to services including email, calendar, payments, dining and shopping. The product is free, with paid subscription tiers, and runs on iOS, Android, muse.ai and WhatsApp. Payments run through Link by Stripe, which generates a one-time card for each transaction, and Meta has said Muse conversations and virtual machine data are not shared with its ad systems.

The architecture matters to the argument. Meta says the agent runs on a secure virtual machine with its own browser, described in the same coverage as a dedicated machine in the cloud, and that it checks with the user before sensitive actions such as sending an email or making a purchase. A separate monitoring agent called Sentinel has to approve anything Muse sends to the internet.

Meta's release materials describe two routes to a service, according to GeekWire. Where a service has a public API, Muse connects to it with credentials the user provides. Where there is no API at all, Meta says, the agent can use the service through a browser, as a person would. GeekWire calls this the mechanism now at the centre of the dispute, but the report does not say which route Muse takes on Amazon.com. Amazon's complaint that the agent does not identify itself when it browses points toward the browser route, although the report includes no technical detail from either company on the traffic itself.

Uptake has been quick. A week after release, Muse became the No. 1 free app in Apple's US App Store, ahead of ChatGPT, according to GeekWire. Early users have described it switching an auto insurance policy, hunting down discount codes at checkout and loading an online grocery cart. Amazon's position became public within days of that ranking.

Amazon's security case, and an unreconciled account of credentials

Muse can reach account pages and order history if a customer prompts it to, Amazon says. Because the agent does not identify itself, the company argues, that amounts to an undisclosed third party moving through customer accounts, processing transactions and handling sensitive data without Amazon's knowledge or consent.

Meta has described the same ground differently. The company said previously, according to GeekWire, that Muse "has no visibility into people's passwords or payment methods," and that credentials a user shares "go into secure storage, so Muse can use them without seeing them, including passwords a person types into the browser themselves."

The two statements differ in emphasis rather than collide head-on. One concerns what the agent stores; the other, what the agent can see. GeekWire does not reconcile them, and nothing in the material cited tests either claim against the other. Credential handling therefore remains an assertion on each side.

A second question sits beside it. How does a retailer bar a visitor that declines to say who it is? Amazon says Muse does not identify itself, yet Amazon is displaying a message specifically to Muse users, so it recognises the traffic by some means that the report does not describe. The difficulty is not new. Amazon's forensic spending on distinguishing agent traffic from ordinary customer traffic was part of what the district court accepted as clearing the $5,000 loss threshold in the Perplexity case, and the same coverage noted that cryptographic schemes such as Web Bot Auth exist because a self-declared header proves nothing.

Two companies already tied together

Amazon products have been purchasable inside Facebook and Instagram since 2023, according to GeekWire. In April, Meta signed a multibillion-dollar deal to run agentic AI workloads on Amazon's Graviton chips. GeekWire calls the standoff especially notable for that reason: the companies are linked by a shopping integration and a computing contract, and now by a dispute over access.

A year of restrictions on outside agents

Amazon's restrictions on outside agents predate Muse by more than a year. On August 21, 2025, Amazon added six AI-related crawlers to its robots.txt file, among them crawlers from Meta, Google and Huawei. Research published the following month found most major UK and US merchants welcoming AI agents, with Amazon the main exception; Shopify, by contrast, set a policy requiring agents that buy for shoppers to include human review steps and to integrate its checkout.

Early November 2025 brought escalation. Amazon demanded that Perplexity stop its Comet browser's shopping agent, using language about agents operating openly and respecting provider decisions that its September 2026 statement closely echoes. The complaint filed on November 4, 2025 in the Northern District of California alleged violations of the Computer Fraud and Abuse Act and California's equivalent, including that Comet sent the same user-agent string as Google Chrome. On November 24, Amazon added more OpenAI-related crawlers to its robots.txt restrictions.

The contractual layer followed. Amazon added a formal agent policy to its Business Solutions Agreement effective March 4, 2026. On May 10, a job listing for an agentic commerce team pointed to a 40-person engineering organisation building APIs and integration layers that connect Amazon's services with third-party platforms, which PPC Land framed as a shift from refusal toward controlled, API-based access. According to GeekWire, Amazon has also moved to restrict shopping agents from Google and OpenAI over the past year, and it says its own Buy for Me feature, which finds items on other brands' websites, identifies itself and lets brands opt out.

The through-line is consistent. Agents that arrive uninvited meet restrictions; agents that arrive by negotiated interface or under Amazon's own banner do not.

What the Perplexity ruling settled, and what it left open

According to GeekWire, Amazon won a preliminary injunction against Perplexity in March and lost it on August 4, when the Ninth Circuit ruled that the user, not the AI company, was the one accessing Amazon's computers under federal anti-hacking law. The court denied Amazon's petition for rehearing on September 10. The ruling left one avenue open for Amazon: claims built on contracts and terms of service. The message Muse users now see accuses no one of hacking. It cites Amazon's Conditions of Use.

Judge Maxine M. Chesney granted the injunction on March 9, 2026, with a seven-day stay. The Ninth Circuit opinion, written by Judge Milan D. Smith Jr. and filed on August 4, 2026 after argument in Seattle on June 11, described Comet as a browser running locally on the user's machine. Its optional assistant takes screenshots, sends them to Perplexity's servers and receives navigation instructions back, and an amicus brief cited in the opinion stated that Perplexity's servers never directly touch Amazon's. On that record, the panel treated the assistant as a tool rather than a person and the user as the party doing the accessing. It also said the outcome does not impair Amazon's ability to regulate access through its terms of service.

Muse is built differently, on the descriptions available. Its browser sits inside a virtual machine that Meta describes as a dedicated machine in the cloud, so requests would appear to originate from infrastructure Meta operates rather than from a user's own device. A footnote in the opinion leaves open whether, on a different record, a developer might exercise control over its assistant in a way that amounts to gaining entry. The opinion pre-dates Muse's release by 35 days. Whether a cloud-hosted design changes the analysis is addressed neither by the court nor by GeekWire.

Why the advertising business is in the frame

GeekWire notes that Amazon generated more than $68 billion in ad revenue last year, a business that depends on people browsing its pages and seeing sponsored products. Full-year 2025 advertising revenue was $68.6 billion, and second-quarter 2026 revenue reached $19.8 billion, up 26% year over year. An estimate attributed to The Trade Desk's chief executive, cited in PPC Land's April analysis of the Perplexity case, put roughly 90% of that revenue in sponsored listings.

What an agent can skip

After the Ninth Circuit ruling, PPC Land's analysis observed that sponsored placements, recommendation carousels and other retail media surfaces are the page furniture an agent can bypass. An agent that completes a purchase inside its own interface, instead of a shopper scanning a results page, changes which of those surfaces anyone sees. Whether Muse renders or ignores sponsored units on Amazon is not described in the material available.

Amazon's own assistant sells placement

Amazon's position is not a rejection of agents. Alexa for Shopping, which merged Rufus and Alexa+ on May 13, 2026, carries paid placement in its answers: Sponsored Prompts became billable on a cost-per-click basis on March 25, 2026. Research published on April 17, 2026 by Workflow Labs' chief executive found that Rufus narrowed a traditional page of about 50 results to roughly five named products. The distinction Amazon draws, between agents that identify themselves and agents that do not, therefore sits beside a second one that the sources leave unstated: whether the agent operates inside the system where placements are sold. The sources do not say what Meta intends on that front.

Open points

The next step rests with Meta, which had not commented when GeekWire published. Whether the dispute stays a popup and a negotiation, or becomes a courtroom case built on contract claims, is not yet known.

Timeline

Summary

Who: Amazon and Meta, with the dispute reported by GeekWire. Perplexity features as the precedent, through the Ninth Circuit case that Amazon lost in August 2026.

What: Amazon said it has cut Meta's Muse personal agent off from buying on Amazon.com on behalf of customers, after failing to persuade Meta to exclude the store. Amazon cites the absence of any agreement, Muse's failure to identify itself, and apparent capture and storage of customer credentials. Meta had not responded when the report was published.

When: Amazon's position became public on Sunday, September 20, 2026, twelve days after Meta released Muse on September 8, 2026.

Where: Amazon.com, for users of Muse in the United States, where the agent was released on iOS, Android, muse.ai and WhatsApp.

Why: Amazon says third-party agents must operate openly and respect merchants' decisions, and raises privacy and security concerns. The surrounding stakes include Amazon's advertising business, which generated more than $68 billion last year according to GeekWire, and a Ninth Circuit ruling that narrowed Amazon's anti-hacking claims while leaving contract and terms-of-service claims open.