Stores open, banks say no, and agents get safer ways to pay
From October 19 to October 26, 2026, stores and platforms described agent shopping, including a Shopify page where merchants publish facts for agents, Wells Fargo, Morgan Stanley, Citi, and Bank of America limited account access, and other companies described safer agent checkout, including a Link balance with a shopper-set limit.
This issue covers every news item dated October 19, 2026 through October 26, 2026. Each title opens that item on the news page. The source link goes to the original report.
Stores and platforms opening to agents
Shopify merchants publish the facts agents get
Shopify said Knowledge base is now in the admin at Sales channels, then Agentic, then Knowledge base. Merchants review, edit, and publish the facts AI agents get about the store, such as contact details and gift services. Shopify drafts those facts from the store's published pages, and nothing it drafted reaches agents until a merchant publishes it. The standalone app ends after January 15, 2027. Stores with fewer than 1,000 facts they wrote or edited had those facts moved and published. Stores with more than 1,000 did not, and must add the ones they want before that date.
Cafe24 turns on WebMCP for every store
Cafe24 said it applied WebMCP to every store built on its platform, the first Korean commerce platform to do so, with no extra development or integration by the merchant. It said the tools cover 11 shopping functions, from product search and cart changes to moving items to the order form and looking up orders. Cafe24 said this works in ChatGPT desktop's built-in browser, the store page updates as the agent works, and the shopper logs in and pays. Chrome can try it with a WebMCP extension and developer settings.
Shopify agents can look up a store's retail locations
Shopify said storefronts with a physical retail location now support Universal Commerce Protocol location search and lookup, starting with version 2026-08-25. An agent can find a merchant's stores by name, city, or distance, and see which stores list every requested item as available. Shopify said a match is not a stock count, a pickup promise, or a reservation, and pickup checkout for a chosen store is not supported.
AEON checkout books Travala hotels
AEON said it launched Agentic Checkout V2 so an AI agent can search and book hotel stays on Travala. The person describes a destination, dates, guests, and budget. The agent searches stays and books after the person selects one. AEON said the funds sit in an on-chain agent wallet the person can fund, with a record of what the agent spends.
BigCommerce turns on WebMCP for browser shopping agents
Commerce.com said WebMCP is on by default for eligible BigCommerce stores, so a shopper's browser agent can search products and fill a cart while checkout stays on the merchant's site. Cloudflare said the standard is still experimental, merchants can turn it off, and the shopper completes checkout (https://blog.cloudflare.com/webmcp-commerce/).
Walmart agent profiles launch next month, gateway is in beta
Not yet live for shoppers. Walmart said Agent Profiles, launching in the next month, let a customer authorize each AI agent with its own profile and either a spending limit or approval on every purchase, and that agents never receive payment-card data. The Walmart Agent Gateway starts as a developer beta. Reuters said that gateway lets assistants such as ChatGPT, Gemini, and Meta's Muse search and buy at Walmart and Sam's Club, unlike Amazon, which limits outside agents (https://www.investing.com/news/stock-market-news/walmart-launches-tools-for-ai-agents-to-shop-for-customers-4964210).
Not yet live · · Source: Walmart newsroom
TikTok Buy Direct checks out with UCP
Shoplazza said it is working with TikTok on agentic shopping. TikTok introduced Buy Direct on October 5, 2026, so a person can buy from a brand inside TikTok without going to an outside store. Buy Direct uses the Universal Commerce Protocol (UCP) to connect to merchant systems, and the brand stays the seller. Shoplazza is a commerce and payment partner. PYMNTS reported the same release (https://www.pymnts.com/news/artificial-intelligence/2026/tiktok-turns-to-shoplazza-to-power-agentic-commerce-offering/).
Banks and sites saying no
Wells Fargo blocks unauthorized agents on accounts
USA Today reported that a Wells Fargo spokesperson said the bank has taken steps to block unauthorized agents from customer accounts. Its updated online access agreement, effective November 24, 2026, says a customer who permits an AI agent is solely responsible for supervising it, and that the agent's transactions, including ones the customer did not want, count as authorized. The article quotes Citi barring agent logins and transactions, with limited read-only access through approved providers, and restates limits at Bank of America and JPMorgan Chase.
Morgan Stanley blocks third-party agents from its platforms
Axios reported that Morgan Stanley has begun blocking third-party AI agents from its platforms, and that a Morgan Stanley spokesperson said the bank had not seen rogue agents there. Axios also said JPMorgan, Bank of America, and Citi are restricting agents. Reuters reported the same day that Morgan Stanley had blocked third-party agents and had not seen unauthorized or rogue agents on its platforms (https://www.livemint.com/technology/us-banks-are-blocking-third-party-ai-agents-access-to-customer-accounts-sources-say-11792698143645.html).
Citi blocks agent logins on customer accounts
The Paypers reported, citing the Financial Times, that Citi does not allow a third-party AI agent to log into a customer's account or make a transaction in Citi's digital banking. Customers can still share limited read-only account data with some open-banking providers. The same report said Bank of America is limiting AI agents' access to consumer deposits while it decides who is liable for a payment an agent authorizes.
Safer ways for agents to pay
Link balance lets an agent spend within a limit
Tempo says Link introduced Link balance on October 26, 2026. A person adds money and sets a limit per purchase. The agent can spend within that limit without asking each time, and it does not see the card details. Instinct is the first agent to offer it. It is rolling out to Instinct users in eligible US regions, with New York coming soon. Link's undated help page says people using Link for agentic purchases in the US can fund a USDC balance so an agent can complete some purchases without approval, up to a per-purchase limit (https://support.link.com/questions/link-balance-faq).
Claude Duet can pay with Shop Pay
Anthropic said Claude Duet, opened October 21, 2026 as a research preview by waitlist for Pro and Max plans in the US, can use Shop Pay from Shopify to check out at online stores. Anthropic's help page says Claude Duet asks before each purchase, pays with a one-time card scoped to the approved amount, and is not given the full card number. Some sites can block the payment (https://support.claude.com/en/articles/17666489-how-to-use-shop-pay-with-claude-duet). The same article says Claude Duet can also pay with Link, Stripe's wallet, after the person approves the spend, using a virtual card.
PPRO starts a council for local payments in agent checkout
PPRO said on October 21, 2026 that it launched the Local Payments Council for Agentic Commerce with founding members BLIK, EPI, Bancontact Company, and DIAS, and that other payment schemes are committed to joining. The council will develop common technical standards so local payment methods can work in agent-led commerce. PPRO listed out-of-band authorisation and session hand-off, agent identity for non-card rails, consent and delegated authority, disputes, refunds and liability, and discoverability. The announcement does not say a shopper can pay with these methods through an agent today.
Not yet live · · Source: PPRO
Evervault launches Browser Tokens for agent checkout
Evervault said it launched Browser Tokens at Money20/20 so AI agents and browser automations can check out, log in, and finish sensitive workflows without receiving payment cards, passwords, or personal data. Short-lived tokens stand in for those values, and Evervault restores the original value only for a destination the developer approved. Evervault said the product is live for Evervault customers, with Ramp and Natural among the first, and that Visa Intelligent Commerce and Mastercard Agent Pay are another route whose availability depends on the card network, issuer, geography and merchant.
Mastercard opens Agent Pay for Machines
Mastercard opened Early Access to Agent Pay for Machines, which it said builds on x402. An agent pays for digital services with a digitally signed payment voucher inside an approved budget, after a service responds that payment is required. Mastercard showed the flow at Cloudflare Connect following end-to-end pilots with Cloudflare, Ant International, AIsa, Base, BVNK, Coinbase, and Hype.
Visa, BILL, and Billtrust pilot agent invoice payments
Visa, BILL, and Billtrust said they launched what they called the first live pilot that lets trusted AI agents complete approved buyer invoice payments through supplier portals. The BILL Payment Agent is registered with Visa's Trusted Agent Protocol and uses tokenized credentials under Visa Intelligent Commerce. Visa said the agent only executes payments the buyer has already approved, and that the pilot is processing transactions with participating buyers and suppliers.
Skyfire and Forter check agent identity at checkout
Skyfire and Forter said Forter now uses Skyfire's Know Your Agent (KYA) identity when it decides whether an agent purchase is trusted. The checkout screen does not change. In a pilot, Jomashop raised its agent checkout success rate to nearly 100%, after bot tools had blocked much of that traffic, without a rise in chargebacks. Forter said agentic orders on its network are more than four times the August level.
All digest issues · Latest news · Who blocks AI shopping agents · Get the weekly note