Someone just bought from a Shopify store without ever opening a browser tab. No storefront, no product photos, no add-to-cart button. That’s agentic checkout, and Shopify switched it on for every eligible merchant this week.
What Shopify actually launched
On Monday, September 28, Shopify extended its WebMCP support to the checkout step. Until now, AI shopping agents could browse a store’s catalog and fill up a cart. But the payment stage stayed off-limits, so a human always had to click the final button.
That wall is gone. An agent can now read the checkout screen, tweak the delivery address, and submit the order, with the buyer’s authorization. Shop Pay is included, and Shopify says the feature is rolling out to all eligible merchants. Gil Greenberg, a staff product manager on Shopify’s agentic commerce team, confirmed the rollout in a post on X.
Here’s his line that sums it up: “If your agent is operating in the buyer’s browser, use WebMCP tools provided on storefront and checkout to efficiently complete order placement, instead of navigating HTML built for humans.”
In other words, agents shouldn’t squint at pages designed for people. They get their own door.
How agentic checkout works
The mechanics are simpler than the jargon suggests. Shopify built this on WebMCP, a proposed web standard currently taking shape inside a W3C working group, with Google and Microsoft contributing. Under WebMCP, a web page can register tools that an AI agent is allowed to call. So instead of an agent taking screenshots and guessing where the “pay now” button is, the checkout hands it a structured interface. Cleaner, faster, and way less brittle.
Everything runs through Shopify’s Universal Commerce Protocol, which already powers search, carts, and checkouts across the platform. WebMCP is the browser-side layer on top of it. This is agentic checkout at the payment step, structured and sanctioned.
The three tools agents use
Shopify added exactly three checkout tools, and the names tell you most of the story:
- get_checkout: the agent reads the current order state. Items, address, shipping option, total.
- update_checkout: the agent changes permitted details, like the delivery address or shipping speed.
- complete_checkout: the agent submits the order, but only after the buyer explicitly signs off.
The agent sees everything before it commits. The buyer sees what the agent is about to do. Then money changes hands.
What this means for your store
Your next customer might not be a person scrolling your homepage. It could be someone telling their AI assistant, “reorder my coffee beans and ship to the office.” If you sell on Shopify, the assistant can now finish that job end to end on your storefront.
That changes a few assumptions. For example, agent traffic won’t look like normal sessions in your analytics, because there may be no pageview carousel at all. Meanwhile, your product data matters more than your banner design. An agent reads titles, specs, prices, and stock status as data, so sloppy or incomplete listings make your store harder for agents to recommend.
There’s also a discoverability angle. Shopify already runs direct partnerships with AI agents like Muse and Instinct for agentic commerce, and the Instinct deal landed the same day as this checkout update. Being agent-friendly is quietly becoming a sales channel, not a gimmick.
The rules Shopify put on agents
Before you picture a robot running wild with someone’s credit card, look at the guardrails. They’re stricter than most people assume.
First, buyer authorization is mandatory at the moment of purchase. The agent must display the current order state and total, then call complete_checkout only after the human confirms. No background purchases, no “the agent decided.”
Second, raw card numbers don’t flow through these tools. That’s deliberate: the agentic checkout flow keeps payment details inside saved instruments like Shop Pay or on the checkout page itself. The agent never touches the actual card data.
Third, agents have to identify themselves. Requests are signed using Web Bot Auth with registered Ed25519 keys, and Shopify warns that unsigned traffic risks being deprioritized or blocked by its bot detection. Anonymous scrapers get the door, verified agents get the structured tools.
Compare that with how other retail giants handle the same question:
| Platform | AI agent purchases | Approach |
|---|---|---|
| Shopify | Allowed | Structured WebMCP tools, buyer sign-off, Shop Pay support |
| Amazon | Blocked | Anti-automation controls against agents buying on your behalf |
| Adidas | Blocked | Same defensive posture as Amazon |
Shopify is betting the opposite way. Instead of fighting agent traffic, it’s building the rails and charging ahead. Whether that bet pays off depends on buyers actually trusting agents with purchases, and early signals from agent shopping apps suggest some already do.
How to get your store ready
You don’t need to install anything. The rollout happens on Shopify’s side for eligible merchants. Still, a short prep list helps you take advantage instead of just watching it happen:
- Clean up your product data. Accurate titles, complete descriptions, correct prices, real stock counts. Agents work off this data, so gaps cost you visibility.
- Keep Shop Pay enabled. It’s the smoothest path through agent-driven checkout, and some checkout types only work with it.
- Check your shipping options. Agents can update delivery preferences, so make sure your shipping tiers make sense without a human explaining them.
- Watch your analytics for odd traffic. Agent-sourced orders will start showing up. Tag them mentally as a new channel, not junk.
- Read the exclusions twice. Standard three-page checkouts (unless they use Shop Pay), B2B checkouts, embedded checkouts, mobile SDK checkouts, draft orders, and multi-shop carts are all outside the new tooling for now.
If your store uses a plain default checkout with Shop Pay, you’re likely in the covered group. Custom enterprise setups should talk to their developers before assuming anything.
The catch (small print that matters)
Browser support is still narrow. WebMCP agent support lives inside Chromium-based browsers through experimental origin trials, think recent Chrome and Edge builds, plus ChatGPT’s desktop app. Safari users are waiting. Firefox users too.
Then there’s the disputes question. If an agent orders the wrong size and the buyer swears they never confirmed it, who eats the return? Shopify’s docs are clear about requiring authorization, but the real-world edge cases (changed totals after approval, agent misreads, family members sharing accounts) haven’t been battle-tested in public yet.
Honestly, that’s normal for a week-one feature. The exclusions list tells you Shopify knows this and is starting with the checkouts it can fully control.
Should you care about agentic checkout?
If you sell online, yes, and sooner than you’d think. Agentic checkout turns your store into something an AI assistant can shop at directly, which means agent readiness becomes a store-health item like page speed or SEO. The protocol work happening at Shopify (with Google and Microsoft in the room) hints this becomes table stakes fast.
Your move today is small: tidy your product data, keep Shop Pay on, and glance at how agents might see your catalog. The merchants who treat agents as real customers from week one will know exactly how to win when everyone else shows up late.
Sources: TechCrunch’s coverage of the announcement and Shopify’s platform. For the safety side of running agents, see our beginner guide to AI agent safety, and for the earlier chapter of this story, how Shopify AI search drives more sales.
