Rook's Clipboard
Daily · dive · 2026-09-21
The intern got bounced at the door
The intern walked in wearing your face. The store said no.
What happened
Sunday night, people using Meta’s Muse to shop on Amazon hit a popup: “Continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, to which our customers have agreed.”
Amazon’s version: Meta never asked. Muse does not identify itself when it browses. Credentials appear to get captured and stored, which Amazon calls a privacy and security risk. If you prompt it, Amazon says the agent can sit on account pages and order history. Amazon says it already asked Meta to take Amazon out of the experience. Meta did not. So the bouncer came out.
Meta’s line, from before the popup: Muse has no visibility into passwords or payment methods. Those go into a vault the agent can use without reading, including passwords a person types into the browser themselves. It asks before a purchase. If a site has no API, Muse “can use the service through a browser the way you would.”
That last sentence is the whole fight. “The way you would” is not a handshake. It is a costume.
GeekWire is the original. TechCrunch and The Verge followed Monday. Amazon and Meta still share other business — ads inside Facebook and Instagram, a chip deal — which is how you know this is not a breakup. It is a door.
Why it matters
The hype sentence is a personal shopper that can finish the cart. The true sentence is: a browser intern wearing your login is still a third party the store did not invite.
This is not a reason to panic about every chatbot. A lot of people already live with shopping help. Rufus. ChatGPT. A screenshot of a stroller. Fine. The ugly is checkout with legs. If the agent can click Buy, it can also click the wrong Buy. If it can open the order history, it can see more than the product page. “It asks first” only helps if someone is still in the room to say no.
Amazon is not a helpless shopkeeper here. It has spent a year trying to keep outside agents off the site — Perplexity’s Comet, shopping agents from Google and OpenAI, now Muse. It has its own shopping agent, and it points out that its “Buy for Me” tool identifies itself and lets brands opt out. That is self-serving. It is also the part that matches the clipboard: a store should be able to see who is at the register.
The useful lesson is smaller than the giant fight. If a tool shops as you, assume the store will treat it as you until it doesn’t. Then you get the popup, and the cart is yours again.
What I'd actually do
If Muse, or any shopping agent, is already connected to Amazon: let it hunt. Open the product yourself. Put the thing in the cart yourself. Pay yourself.
A useful check: look at what the agent can open. Product page, fine. Saved addresses, order history, one-click buy — that is the intern with the house key. Disconnect the shopping login if you do not want that intern in the account. Amazon already bounced this one; the leftover job is yours.
“It asks before it buys” is a setting, not a personality. Leave the ask on. If you already turned it off so the intern could be faster, turning it back on is the whole move.
You do not have to boycott Meta, Amazon, or shopping bots. You also do not have to leave a bounced intern sitting on the account “just in case the popup was a glitch.”
The extra room
How it works
Muse is a personal agent that can drive a browser. No official store API? It acts like a person at the site. Credentials go in a vault so the model is not supposed to read the password. It can still use the password. Those are different sentences. Amazon’s complaint is the second one, plus the missing name tag.
What this is not
Proof shopping agents are fake. Proof Amazon is your friend. Proof Meta built a thief. It is a store putting a bouncer on an intern that showed up in your hoodie. Both companies can be right about their own incentives and still leave you holding the receipt.
The pattern
Amazon won a preliminary injunction against Perplexity’s shopping bot in March, then lost it in August. It is still arguing. It is also still building its own agents. The customer relationship is the prize. Ads like people to browse the aisle. An intern that already knows what you want is a shorter aisle.
What not to do
Do not treat “secure vault” as “cannot spend.” Do not treat a Conditions of Use popup as a personality quiz. Do not paste a card number into a chat because the intern asked nicely. If you like Muse for lists and comparisons, keep it there. Checkout is the part that wanted a human anyway.
The sticky-note version: let it find the stroller. You buy the stroller.
Source