Can AI Agents Buy Things Online Without a Human?
Anthropic's Claude Code desktop browser can browse, click, and fill carts on any site, but by design won't purchase, sign up, or bypass CAPTCHAs.
Research
Short, sourced notes on how AI agents find, understand and buy — checkout protocols, crawler rules, and the moves that keep a store agent-ready. We don't audit discovery, we audit the transaction.
Anthropic's Claude Code desktop browser can browse, click, and fill carts on any site, but by design won't purchase, sign up, or bypass CAPTCHAs.
Google told a merchant that Cloudflare Content-Signal robots.txt tags have no effect on any AI crawler, unlike enforced bot-blocking rules.
The x402 Foundation went operational on July 14, 2026, with Visa, Stripe, Shopify and dozens of others standardizing AI agent payments.
OpenAI, Anthropic, Perplexity, Google, Meta and Apple each publish distinct AI-crawler user-agent tokens for robots.txt, listed here with sources.
The EU's July 2026 DMA ruling requires Google to let rival AI assistants order and act inside Android apps starting mid-2027.
Amazon v. Perplexity is the pending Ninth Circuit case deciding if merchants can block AI shopping agents by policy alone.
Lighthouse 13.3 shipped a default-on Agentic Browsing score checking llms.txt, WebMCP and accessibility, scored as a pass ratio, not 0-100.
A canonical tag that points at a URL which itself redirects sends a broken signal to Google, and AI Overviews inherit the same blind spot.
Search Console's new Search generative AI control lets sites exclude their pages from AI Overviews and AI Mode, but not from the Gemini app.
Compression APIs like agentready.cloud shrink prompts 40-60% for agent builders. That saves the agent money — it does nothing to make your store buyable.
Two scanners scored one Shopify store 96/100 and 41/100 on the same day. Neither is wrong — they measure different layers. How to read both scores.
ChatGPT search runs on Bing's index, so a store that Bing hasn't indexed stays invisible to ChatGPT even if it ranks well on Google.
A buyer asked ChatGPT about agentready.market and got an unrelated product's price. What failed in the entity layer, and the fixes we shipped.
Microsoft Clarity's free Violations card shows what share of AI bot traffic to a site is requesting URLs its robots.txt disallows.
Cloudflare's free Agent Readiness Score checks for a commerce discovery file, but never attempts an actual agent-driven purchase.
Google's new Google-Agent fetcher is documented to ignore robots.txt by design, so merchants need IP blocking or auth instead.
Microsoft Clarity Citations, live since May 2026, is a free dashboard showing which pages get cited by Copilot and Bing AI answers.
Chrome 149's WebMCP origin trial lets sites like Shopify and Etsy register a checkout tool agents can call instead of scraping the page.
Google, Microsoft and nine others shipped Agentic Resource Discovery, a spec for a public ai-catalog.json file — and almost no one has one yet.
Web Bot Auth lets an AI agent cryptographically sign its requests — and Visa, Mastercard and Amex are building agentic-checkout authentication on top of it.
The Model Context Protocol ships its largest-ever spec revision on July 28, 2026, and Shopify merchants already run an MCP server whether they know it or not.
ChatGPT and Google now complete purchases inside the assistant. They run on two different, non-interoperable protocols — ACP and UCP.
If you're checking Google Analytics for ChatGPT or Perplexity traffic, you won't find it — GA is structurally blind to AI agents.
What changed in the protocols this week — and what it means for your store. No spam, unsubscribe anytime.