The last step of an online purchase has long been stubbornly human. A shopper scrolls the checkout, retypes a shipping address, picks a card and presses pay. On Monday, Shopify began handing that final click to software.
The company said browser-based AI agents can now complete purchases on the storefronts that run on its platform, using three new tools it added to WebMCP, the protocol Shopify is promoting for agents that work inside a shopper’s browser. The tools are named get_checkout, update_checkout and complete_checkout. Together they let an agent read the current checkout, change the delivery address or shipping option, and place the order after the buyer approves it, without taking screenshots or scraping the page the way earlier agents had to.
Shopify said the capability rolls out to more than two million eligible merchants and is switched on by default, including for checkouts that run through Shop Pay, the company’s stored-payment system. The change completes a journey Shopify has been building for months: its agents could already search a merchant’s inventory and fill a cart. Now they can carry the transaction all the way to the receipt page.
Underneath the tools is a protocol Shopify has been assembling in stages. The company already runs a hosted Model Context Protocol server for agents that work server-to-server, and it has positioned WebMCP as the browser-side counterpart. Both rest on the same underlying framework, which Shopify calls its Universal Commerce Protocol, a common way to search for products, build a cart and check out. The difference is where the agent lives: on a merchant’s server, or inside the shopper’s own tab.
The partners attached to the announcement are the two most visible personal agents in the market. Meta’s Muse and Instinct, a startup that builds an agent to field calls and arrange travel, both hold direct deals with Shopify for agentic commerce. The Instinct agreement was disclosed the same day, according to a person familiar with the matter. Instinct announced a $1 billion funding round this week led by Sequoia Capital, Benchmark and Coatue at a $10 billion valuation, people familiar with the matter said. For a company that young, a checkout partnership is less a revenue source than a claim on what its product can do.
The move puts Shopify on the opposite side of a widening split in retail. Amazon has barred Muse from shopping on its site, arguing the agent does not identify itself and scrapes customer credentials, and Adidas has reportedly taken similar steps, according to people familiar with the matter. Shopify is betting the other way: that merchants on its platform want more buyers in their checkouts, whatever software is driving them.
The economics explain the disagreement. Amazon guards a single storefront and the customer data it holds. Shopify’s merchants each own their relationship with buyers, and Shopify earns more when more orders complete, whether a human or an agent pressed the button. The risk of a mistaken purchase lands mostly on the merchant and the buyer, and the tools are built so that only the buyer can authorize the final submission.
That authorization requirement is the guardrail Shopify is leaning on. An agent can read a cart and change a delivery option, but it cannot hand over a new card number, and it cannot place the order until the person on the other side of the screen confirms the total. The company argues this keeps the buyer in control while removing the friction agents otherwise meet in a checkout built for human hands.
The question Shopify has not answered is whether shoppers actually want an agent spending their money. The tools exist, the partners are signed, and the default is on. What remains to be seen is how many people hand the last click to a machine, and whether the retailers that blocked agents will reconsider once the first wave of purchases goes through.
The race this sets off is bigger than a single checkout. If agents become a normal way to shop, the platforms that make transacting easy for them will collect the merchants and the data, while the platforms that block them risk watching their shoppers delegate the chore to software that goes elsewhere. Shopify has placed its bet by turning its checkout into something an agent can read like an API.
Analysts said the split is less about technology than about strategy. Amazon has a walled storefront to protect. Shopify has a network of merchants whose interests are served by more orders from more sources. Both can be right, for now, which is why the two companies have answered the same question, who should be allowed to press buy, in opposite ways. The outcome will turn on which fear wins out: the fear of a bot making a mistake, or the fear of losing the sale.
