Shopify blocks AI agents from automated checkouts

Shopify updated its robots.txt policy for merchant storefronts to explicitly prohibit autonomous AI agents from finalizing purchases. The platform mandated that checkouts are reserved for humans, barring scripted form fills, browser automation, and end-to-end agent flows that complete orders without contemporaneous human approval. The directive applies specifically to individual merchant storefronts rather than the shopify.com corporate site, taking effect retroactively from July 15, 2025.

The change sets an advisory boundary rather than a hard technical block. AI discovery crawlers such as GPTBot and PerplexityBot retain full access to product, collection, and page paths. However, Shopify has restricted access to the /checkout and /cart paths. The decision comes despite comments from President Harley Finkelstein during the first-quarter 2026 earnings call, where he stated that AI is native to Shopify, and follows an eightfold increase in AI-driven traffic across the platform in the same quarter.

The policy responds to a lack of payment dispute standards and unresolved liability questions. According to September 2026 data from PYMNTS Intelligence, 93% of merchants believe AI providers should cover financial losses from agent errors. At present, payment networks lack a standardized reason code for agent-driven mistakes. In addition, the PYMNTS and Visa GDSI report found that only 11% of small and medium-sized businesses are technically agent-ready.

Competitors are pursuing contrasting strategies across the sector. Constructor recently unveiled a Stripe-powered Agentic Checkout, while TikTok rolled out Shopping Assistant and Buy Direct features. Meanwhile, Shopify serves as the platform making Muse the default interface for Meta's agent while simultaneously requiring UCP and MCP endpoints to enforce buyer approval before payment processing.