Websites block AI agents, pushing platforms to retail partnerships

Popular sites—including Amazon, Delta, JPMorgan and Yelp—are blocking AI agents. Operators face a fragmented web where automated tasks can trigger anti-bot flags and ad models shift.

What happened

OpenAI, Meta, Google, Instinct, and others are pushing autonomous agents that can book reservations, clean inboxes, and buy shoes. But in recent weeks, users of Meta’s Muse, xAI’s Grok, OpenAI’s Dots, and Instinct have reported blocks preventing those agents from completing tasks across top websites.

Yelp said it only allows AI agents that pay for its data licensing program. Delta Air Lines is preventing agents from booking tickets on behalf of users. JPMorgan Chase and Charles Schwab confirmed they block agents from accessing accounts because of security concerns. Some users say sites that previously worked with their agent are no longer accessible, including Cars.com and Amtrak, suggesting other companies could be quietly blocking them.

Amazon has been central to the conflict. It banned Perplexity’s agentic shopping feature and sued the AI startup. A judge later ordered Perplexity to stop its AI agents from shopping on Amazon, but an appeals court overturned that ruling in August, and Amazon has since filed an amended complaint. Amazon also said Meta Muse’s “continued access” violates its site policies, while there are reports of xAI’s Grok, Instinct’s AI agent, and OpenAI’s Dots being unable to use Amazon.

Key facts

• OpenAI, Meta, Google, Instinct, and others promise agents that can scour the internet, book reservations, clean inboxes, or buy shoes, but users report blocks across top websites.
• Yelp only allows agents that pay for its data licensing program; Delta blocks ticket booking; JPMorgan Chase and Charles Schwab block account access for security.
• Amazon banned Perplexity’s agentic shopping feature; a judge ordered Perplexity to stop, an appeals court overturned the ruling in August, and Amazon filed an amended complaint.
• Meta says turning away a personal agent means turning away the customer behind it and has partnered with Walmart, Gap, Sephora, and Best Buy; Shopify opened its storefront network to agents.
• Cloudflare introduced a one-click block for AI crawlers in 2025 and now blocks crawlers that scrape websites for both search indexing and AI training, adding friction for automated visitors.

Our analysis

The blocks reveal a structural clash between agent platforms and destinations that depend on human attention, account security, and direct customer relationships. Perplexity responded to Amazon by pointing out that Amazon doesn’t want AI agents roaming its platform because it won’t get as many human eyeballs in front of its ads. That suggests commerce and content platforms may see agent access as a threat to existing monetization, not just a technical nuisance.

EquiStamp CEO Chris Canal told The Verge that the roadblocks do impact the perceived value of OpenAI and Anthropic: “If there are companies that are actively working to make that not happen, there are just fewer useful things the agents can do.” Meta’s alternative—partnering with Walmart, Gap, Sephora, and Best Buy—shows a likely division emerging between “allowed” agent commerce through deals and open access that gets blocked. For operators, this is different from earlier crawler debates because agents act on behalf of a logged-in user, so they trigger the same safeguards as bots used for scams or hacking.

Canal also says these protections may make the ordinary web more annoying. More sites may roll out human-verification interfaces, even on simple grocery shopping sites. That means unreliable automation is not just an AI company problem; it affects any team that relies on agents for scheduling, checkout, or data collection.

What it means for operators

• Treat agent access as a business relationship decision. If your brand or store controls a website, decide whether agents are blocked, licensed, or partnered. Meta’s Walmart, Gap, Sephora, and Best Buy partnerships show paid or negotiated access is replacing open scraping.
• Do not build critical workflows on AI agents without a human fallback. Reports of Walmart checkout issues despite a Meta partnership and Google flagging some Muse accounts show even allowed automation can hit anti-bot false positives.
• Expect more verification friction for automated tasks. Cloudflare’s one-click block and anti-bot systems mean your social scheduling, scraping, or agent-based posting may get challenged more often; use official APIs where possible.
• Track legal and platform policy changes. The Amazon-Perplexity case moved from a judge’s order to an appeals court reversal in August, and Amazon filed an amended complaint, so agent access rules are still shifting. Document how your content and commerce appear to agents to avoid losing attribution, ad views, or customer contact.