Can an AI agent complete a purchase on a Shopify store? Since September 28, 2026, yes, on eligible checkouts: Shopify’s developer changelog says browser agents can now read and update Shopify checkouts through WebMCP tools, and place the order once the buyer confirms it. The tools “don’t expose a new API or require merchant configuration.”

What shipped

Shopify already offered WebMCP tools for storefront and cart. The new checkout tools, per the changelog, are:

  • navigate_to_storefront: hand the tab back to the storefront.
  • get_checkout: read checkout state, messages and post-completion order details.
  • update_checkout: update supported checkout fields.
  • complete_checkout: submit the checkout after buyer confirmation.

They run inside checkout-web and use the same state as the checkout UI. TechCrunch reports the rollout covers all eligible Shopify merchants, and that the tools let agents work without screenshots or scraping. (For background on the browser standard itself, see our WebMCP explainer.)

Identification is not permission

The detail merchants should notice comes from Shopify’s checkout docs, as summarised by Search Engine Journal:

  • Agents should sign browser requests with Web Bot Auth, which Shopify relies on to recognize agents. Without it, requests might be deprioritized or blocked by bot detection.
  • Before calling complete_checkout, agents must show the buyer the current order and total and get their permission. A Web Bot Auth signature, a Shop Pay approval or a ready-to-complete status does not count as that consent.

So “who is asking” and “may they buy” stay separate gates. Our piece on Web Bot Auth and agentic checkout covers the first gate.

Where control returns to the buyer

Per the changelog and SEJ’s reading of the docs, control goes back to the shopper for:

  • 3D Secure authentication and Shop Pay login or payment challenges.
  • Blocking UI extensions and review steps.
  • Any payment other than a saved Shop Pay card or Shop Pay approval; the tools do not accept new card details.

Agents also cannot change the items in the order.

What is excluded

SEJ lists the limits: Shopify’s standard three-page checkout gets no WebMCP tools unless the buyer uses Shop Pay. B2B checkout, embedded checkout, mobile checkout SDKs, checkouts with merchandise from another shop, draft orders, order edits and payment collection are excluded. Storefront docs currently say agents can use WebMCP only in Chromium-based browsers.

What is not known yet

SEJ notes that Shopify’s docs do not say whether merchants can switch off individual tools or separate agent-placed orders in reports, and do not name which agents call the checkout tools. Neither the changelog nor the docs include real-world data on agent orders or conversion. Shopify’s comparison against browser automation, reported by SEJ, used test shops and a single model.

What to do as a merchant

  • Check which checkout version you run: the three-page flow only exposes the tools to Shop Pay buyers.
  • Test your checkout for blocking UI extensions, since they hand control back to the buyer.
  • Watch the changelog for merchant controls and reporting.

FAQ

Can AI agents buy from my Shopify store without my setup?

On eligible checkouts, yes. Shopify’s changelog says the WebMCP checkout tools do not require merchant configuration, and TechCrunch reports the rollout covers all eligible merchants. The agent still needs the buyer’s confirmation before the order is placed.

Does Web Bot Auth let an agent place an order?

No. Shopify’s docs, as reported by Search Engine Journal, say a Web Bot Auth signature does not count as buyer permission. It helps Shopify recognize the agent; the buyer must still approve the order and total.

Which Shopify checkouts have the WebMCP tools?

Eligible checkouts only. The standard three-page checkout gets the tools only when the buyer uses Shop Pay, and B2B, embedded, mobile SDK and draft-order checkouts are excluded.

Sources

Agent-readiness at the checkout is now a question of what your own checkout lets an agent do and where it hands control back, which is exactly the transaction AgentReady audits.