On the evening of Sept. 20, 2026, consumers who despatched Meta’s purchasing agent Muse to amazon.com bought a web page that stated: “Continued entry by an unauthorized AI agent violates Amazon’s Situations of Use, to which our prospects have agreed.” Todd Bishop reported it for GeekWire that evening, with Amazon confirming the block.
A web site proprietor who has noticed an automatic customer and desires it gone has a couple of controls, and Amazon reached for phrases of service, the settlement with whoever is logged in.
The second management, robots.txt, had nothing to work with. A rule in that file names a person agent string, the label a chunk of software program sends when it asks a web site for a web page, after which states what that software program could fetch. Meta’s crawler documentation offers none for Muse. Additionally, robots.txt can’t implement the rule.
The Pc Fraud and Abuse Act (CFAA), the 1986 anti-hacking statute, had bought a lot weaker for Amazon on Aug. 4, 2026. That was the day the Ninth Circuit, a U.S. federal appeals court docket, threw out a court docket order Amazon had received in opposition to Perplexity and dominated that the consumer, not the agent’s vendor, is the one accessing the web site.
Amazon’s Situations Of Use Is An Settlement With The Human Shopper, Not With Meta
Situations of Use is the settlement a consumer accepts after they open an Amazon account, and Meta has nothing to do with it. Amazon gave GeekWire three causes: Meta by no means advised Amazon that Muse would entry its retailer, the agent “doesn’t establish itself when it browses”, and it “seems to seize and retailer buyer credentials,” which Amazon says may create privateness and safety dangers. An Amazon spokesperson advised GeekWire that third-party purposes making purchases on a buyer’s behalf “ought to function brazenly and respect service supplier choices about whether or not or to not take part.”
All three causes are complaints about Meta, and the doc Amazon is implementing binds the consumer. Amazon has individually requested Meta to take away Amazon from the Muse expertise.
Muse Has No Consumer Agent String, So Amazon’s Robots.txt Can not Refuse It
Meta’s crawler documentation lists 5 brokers and Muse is just not amongst them, so Amazon has no title to place within the rule.
Amazon’s robots.txt, fetched from amazon.com/robots.txt on 22 September 2026, declares 101 person agent blocks, 100 of which carry Disallow: /, the road that refuses an agent the whole web site. ClaudeBot is listed twice, so these hundred blocks title 99 distinct brokers. GPTBot, CCBot, PerplexityBot, ClaudeBot, Google-Prolonged, GoogleAgent-Mariner and GoogleAgent-Procuring are refused the whole lot.
Meta seems thrice in Amazon’s robots.txt. meta-externalagent crawls for mannequin coaching and indexing, meta-externalfetcher fetches particular person hyperlinks at a person’s request, and meta-webindexer improves Meta AI search outcomes. All three get Disallow: /, which means Amazon tells them to not learn any pages.
Two of Meta’s 5 documented crawlers are absent from the named blocks, in order that they fall underneath the final Consumer-agent: * guidelines like all crawler Amazon has not named, and people guidelines instruct crawlers to remain out of the cart, sign-in, and account paths whereas leaving product pages open. FacebookExternalHit is how a shared Amazon hyperlink will get its preview inside Meta’s apps, and Meta-ExternalAds helps Meta’s promoting enterprise.
Meta Stated That Muse Would Seem As Your Personal Exercise
Meta’s wording, printed on Sept. 8, 2026 within the engineering account of the design that went out the day Muse launched, is that when Muse browses the web it “will seem as your exercise.” Meta places that in a piece on knowledge coverage, disclosing that how an individual makes use of Muse can affect the advertisements they see. The agent drives “an actual up-to-date Chromium based mostly browser,” so the web site on the opposite finish information an atypical buyer session. I went by the put up on the time. Muse is U.S. solely and free with paid tiers, and neither Meta’s launch put up nor GeekWire offers a quantity for a way many individuals store by it. I count on Meta to both proudly share a quantity quickly, or not share one in any respect.
Twelve days later, on September 20, Amazon says the agent “doesn’t establish itself when it browses.” Amazon was in a position to inform Muse periods other than atypical consumers, after which served them a distinct web page. Neither Amazon nor GeekWire says how Amazon did this.
Amazon Printed No Proof For Its Credential Declare
Amazon says Muse “seems to seize and retailer buyer credentials.” Meta had printed on launch day the place Muse shops them. The credentials are held by a background service referred to as authd, contained in the digital machine Meta offers every Muse person, a pc that runs as software program on {hardware} some other place. Meta’s wording is “saved in your VM, not in centralized Meta infrastructure.” The agent itself works solely from surrogate tokens, stand-ins for the true credential. Meta’s wording is {that a} element referred to as Sentinel “will change any surrogate tokens with the true credential, obtained from authd, on the community boundary.” On Meta’s description the mannequin by no means sees the credentials, and I’ve discovered no impartial test of that within the protection of the block as of September 22.
So Amazon raised as a priority one thing Meta had printed, and the half Amazon added, that this might create privateness and safety dangers, got here with no captured request, no named endpoint and no disclosure timeline.
After all Amazon has a purchasing agent of its personal and an promoting enterprise constructed on individuals taking a look at its pages. Alexa for Procuring launched in Might 2026, as GeekWire notes. Amazon made greater than 68 billion {dollars} in advert income in 2025, by GeekWire’s determine, from a enterprise that “depends upon individuals searching its pages and seeing sponsored merchandise.” And GeekWire information Amazon’s level that its different agent, Purchase for Me, identifies itself and lets manufacturers decide out, which is the conduct Amazon is asking of Meta.
Meta had not answered by the point GeekWire printed, and I’ve discovered no response within the protection since, as of September 22. Nothing a consumer can run from outdoors Meta’s VM settles the credential declare. Two issues would settle it: Meta opening the VM to an impartial audit, or Amazon producing no matter their “seems to” rests on.
Amazon Already Misplaced This Argument Towards Perplexity, And The Courtroom Left Muse’s Case Open
Amazon had already tried the courts in opposition to Perplexity, and misplaced. It sued over Comet, a browser that logs into a consumer’s Amazon account and buys on their behalf, and in March 2026 it received a court docket order retaining Perplexity’s agent out of the password-protected elements of the shop whereas the case ran. The Ninth Circuit put that order on maintain, heard the attraction on June 11, and threw the order out on August 4.
Comet runs on the consumer’s personal pc, so Perplexity’s machines by no means discuss to Amazon’s. That’s the place the court docket began. It dominated that the consumer is the one visiting Amazon, not the corporate that wrote the software program, and quoted a quick from the Digital Frontier Basis and 4 different outdoors teams: “Perplexity’s servers by no means immediately entry Amazon’s servers.” The case is written up in full right here.
Amazon requested for the case to be reheard by a bigger group of judges, which legal professionals name going en banc. On this circuit, that’s 11: the Chief Choose and 10 drawn by lot, slightly than each choose on the bench. On September 10, the court docket refused, and never one choose requested for a vote on it.
So on this circuit the anti-hacking legislation is usually gone as a software in opposition to an agent, an individual despatched, and what the court docket left Amazon was its personal phrases of service. Twelve days after Muse launched and ten days after that refusal, Amazon put a Situations of Use discover in entrance of its personal consumers.
There may be one query the Ninth Circuit didn’t reply, and it wrote the reservation into the opinion: “We don’t tackle whether or not, on a distinct report or new information, Perplexity could train management over the Assistant in such a manner as to achieve entry to Amazon’s servers.” That’s the case the place the software program firm, not the consumer, is the one working the agent.
Muse doesn’t run on the consumer’s machine. Meta’s personal description is that “you and your Muse share your personal devoted pc within the cloud,” an “remoted Linux field” reachable from WhatsApp, the Muse apps and muse.ai. Meta names no internet hosting supplier. GeekWire notes that Meta signed a multibillion-dollar deal in April 2026 to run agentic AI workloads on Graviton, the server processors Amazon designs for its personal cloud, and neither firm has stated whether or not Muse is amongst these workloads. If Muse is amongst them, Amazon is obstructing an agent that runs on {hardware} Amazon rents out.
Situations Of Use Was The Solely Motive Amazon May Put On The Web page With out A Identify Or A Lawsuit
Amazon’s Situations of Use reached Muse as a result of the consumer working Muse had already accepted these phrases, and neither robots.txt nor the Pc Fraud and Abuse Act had that maintain. Phrases of service bind your buyer, so implementing them means telling the one that was making an attempt to purchase one thing that the way in which they selected to buy is just not allowed. That’s the sentence on Amazon’s block web page. It’s extra trustworthy than yelling CFAA, anyway.
Anybody can write that sentence in their very own phrases. What Amazon has not defined is the way it noticed Muse within the first place, and till it does, that is one thing Amazon did slightly than one thing any web site can do.
Extra Assets:
This put up was initially printed on No Hacks.
Featured Picture: Roman Samborskyi/Shutterstock
