Shopify opens checkout to browser AI agents: three WebMCP tools, buyer-gated
Shopify opened checkout to browser AI agents via three WebMCP tools, gated by buyer authorization; live for eligible merchants as of September 28.
Shopify announced on September 28 that checkout, including Shop Pay, now supports WebMCP: three new tools — get_checkout, update_checkout and complete_checkout — let browser-based AI agents read and update the checkout screen and submit orders with the buyer’s authorization, no screenshots or webpage scraping needed. The feature is rolling out to all eligible merchants, with Meta’s Muse and Instinct as launch partners; both the WebMCP tools and Shopify’s server-to-server MCP build on the Universal Commerce Protocol.
The facts
- Scope: checkout and Shop Pay, for any WebMCP agent running in the buyer’s browser.
- The tools: get_checkout (inspect checkout state), update_checkout (change customer address, delivery option), complete_checkout (place the order).
- Permission design: order placement requires buyer authorization; the pitch is “no screenshots, no scraping.”
- Partners: Muse (Meta) and Instinct announced the same day; the contrast is Amazon and reportedly Adidas blocking agents from purchasing.
- Protocol base: both WebMCP and the hosted MCP sit on Universal Commerce Protocol (UCP).
Our take
The agentic-commerce schism got very concrete on one day: Shopify made “agents can check out” a protocol capability and pushed trust into a single buyer-authorization gate, while the Amazon camp keeps building walls. If you’re building a shopping agent like Instinct or a Muse integration, this is the first large-scale checkout API of its kind — start with the WebMCP docs and get the authorization flow right, because it’s about to become the de facto reference for every protocol that follows.