Amazon blocks Meta's Muse as consumer AI agents run into website walls

Consumer AI agents that act on a user's behalf — booking flights, reserving tables, ordering groceries — have hit a bottleneck that has little to do with model capability: the websites they need to use. According to TechCrunch, Amazon has begun blocking Meta's Muse agent from its retail site, meaning Muse can no longer browse the catalog or complete purchases there. And the problem extends well beyond one retailer, mixing deliberate policy with collateral damage from older anti-bot defenses.

Deliberate blocks and accidental ones

Complaints on social media have named Yelp, eBay, Zillow, Pizza Hut, Adidas and several airlines as places where agents fail, and some users believe the blocking has recently increased, TechCrunch reports. Two people said eBay suspended their accounts over their use of agentic AI; another said Google ejected the Instinct agent while it was tidying a Gmail inbox. The ambiguity is its own problem: an end user cannot tell whether a failure is intentional, so frustration lands on the retailer and the agent provider at once.

Walmart shows the accidental side. TechCrunch saw complaints that Muse could not finish purchases on Walmart's site, and NBC reported the retailer had hit the same problem in its own tests. But Walmart says the blocks are not deliberate — it is a Muse partner, an arrangement announced at Meta's Connect conference in September — and wants to be wherever its customers are. The apparent culprit is a click-to-prove-you're-human button: if the agent interrupts that check, it fails and the session drops. Current verification technology, in other words, fits the agent-first web poorly.

Airlines hold the line

Flight booking is a flagship use case for these agents, yet airlines are among the least welcoming. Delta told TechCrunch it protects customers from unauthorized automated activity and has no partnership or integration that lets a third-party agent shop for or book flights on its platforms, though it continues to evaluate the technology. United did not answer directly; a spokesperson pointed to terms of use that bar automated access without prior written permission, and the airline did not respond to a follow-up on whether specific agents are being blocked.

Yelp is explicit: it permits no non-human traffic unless the agent pays for its data licensing program, so an unaffiliated agent trying to get a quote, join a waitlist or book a table will generally fail. eBay says it does not ban all third-party shopping agents but restricts unauthorized ones and actions such as automated scraping and model training. Adidas, Zillow and Pizza Hut declined to comment or did not respond.

Cloudflare sits in the middle

Some observers suspect Cloudflare and similar content delivery networks of disrupting Muse traffic. A September 15 change to Cloudflare's crawler defaults let site owners block AI training while allowing other bots, and sites that had blocked AI bots for security were shifted to also block AI agents on pages carrying ads. Cloudflare said it had no specific data to share and pointed to its public Radar hub, which shows rising bot traffic but cannot separate agents acting for users from malicious automation. The company also has commercial stakes here: it runs a marketplace where AI bots pay for data access and is testing a browser built for agents.

An open standard, plus deals in the meantime

A group including Meta, Walmart, Stripe, Sierra, Genesys, Rocket, NiCE and Decagon has begun work on an open standard for how agents communicate with businesses. Per a Meta blog post, the protocol focuses specifically on agent-to-agent communication for online commerce, aiming to separate bots acting on a user's behalf from the harmful kind.

In the interim, Meta is leaning on direct brand partnerships and maintains a growing list of connectors inside the Muse app that TechCrunch expects to be reorganized as new partners arrive. The company's argument is simple: a business that refuses an agent is refusing the customer behind it.

Why it matters

Whether consumer agents deliver on their promise will be decided less by intelligence than by access. The web now taking shape is a permissioned one — agents with partnerships get in, everyone else bounces off anti-bot walls, and legacy verification can lock out even willing partners. The new commerce standard could make that gatekeeping coherent, or it could entrench a two-tier web where agent access is something businesses sell rather than simply grant.