Can AI shopping agents buy from my Shopify store?
30 October 2026
Shopify now lets them go as far as payment. Since 28 September 2026, it gives browser agents tools to read and fill in a store's checkout, and the order is placed only after the shopper confirms. Whether a visit gets there depends on your store, because an agent can stop well before checkout: at a sign-in it will not do, a fact it cannot read, a pop-up over the button it needs, or a bot check it cannot pass.
What Shopify lets an agent do
Shopify's developer changelog of 28 September 2026 lists four tools a browser agent can call at checkout: go back to the storefront, read the checkout, update its fields, and submit it “after buyer confirmation”. When the buyer's own input is needed, such as 3D Secure, the tools hand control back to the buyer. The merchant does not have to set anything up.
Shopify also asks agents to say who they are. Its checkout documentation tells agent makers to sign their requests with Web Bot Auth, and warns that without it, bot detection might deprioritize or block their requests. Since May 2026, bots that do not sign get Shopify's strictest rate limits. What Web Bot Auth is.
So the platform is open to agents. Whether a visit gets that far depends on the store.
Where a visit can stop before checkout
An agent shops the way its shopper asked: it searches, opens products, checks the facts it was asked about and adds to the cart. On a real store, these are the places it can stop:
| Where | What the agent meets | What you can change |
|---|---|---|
| Adding to the cart | A sign-in before a product can go in the cart | Let shoppers add to the cart without an account |
| The product page | The ingredient list, size chart or care details only in a picture | Put the same facts in the page text |
| The product page | A pop-up or banner over the button it needs | Show the pop-up later, or make it easy to close |
| Any page | A bot check or captcha | Keep challenges off product, cart and checkout pages, or let signed agents through |
| Checkout | An account required to check out | Turn on guest checkout |
An agent that stops does not complain to you. Its shopper is told what it could not do, and can buy somewhere else.
How to find out for your store
The plainest test is to try it. Give an AI assistant that can use a browser a real errand on your store, such as a gift under a budget or a refill of something you sell, and watch where it stops. One try shows you one shopper's path; another shopper, asking for something else, can stop somewhere else.
Questions
Can an AI agent pay for an order on my store?
Shopify's checkout tools submit an order only after the buyer confirms, and hand control back to the buyer for steps such as 3D Secure. The agent does the steps; the shopper approves the purchase.
Do I need to set anything up for agents on Shopify?
Shopify says its checkout tools need no setup from the merchant. What helps is on your side of the store: facts in the page text, a cart and checkout that do not demand an account, and pop-ups that do not cover the buttons.
Are agents that do not sign their requests blocked?
Shopify says they get its strictest rate limits and that bot detection might deprioritize or block them. It does not say every unsigned agent is blocked.
How do I know whether AI agents visit my store?
Some leave a trace in your analytics and some do not. How to tell AI visits apart in your analytics.
We built deciq to show you where AI shopping agents stop on your own store. Eight agents visit, each on a different shopper's errand, and the report shows where each one stopped and what to change.
Join the waitlist