AI Agents Websites: The New Access Battle
Personal AI agents are moving beyond chat and into real tasks: booking flights, reserving tables, ordering groceries, and making purchases. But as these AI agents websites interact with more retail and travel platforms, a new problem is emerging. Many sites are blocking them, sometimes deliberately and sometimes by accident.
That friction is now one of the biggest hurdles for consumer AI. It frustrates users, slows adoption, and raises a hard question: how should the web distinguish helpful agents from harmful bots?
Why AI Agents Websites Are Blocking Them
The most visible example involves Amazon, which began blocking Meta’s Muse AI agent from its retail site. That meant the agent could no longer browse or make purchases from Amazon’s catalog. But the issue is not limited to Amazon or Muse.
User complaints across social media show agents running into similar blocks elsewhere. Some are intentional, like Amazon’s. Others come from traditional anti-bot measures designed to stop spam and malicious activity.
What users often cannot tell is whether a block is accidental. That leaves them frustrated with both the retailer or service provider and the agent trying to complete the transaction.
Walmart’s Human Check
Complaints have claimed Muse could not complete a purchase on Walmart’s retail website. Walmart had also faced this problem in its tests of the AI agent.
A Walmart spokesperson said these blocks were not intentional. Walmart is partnered with Muse, as announced at Meta’s Connect developer conference in September. The company said it wants to be where its customers are, and that now includes AI agent experiences.
The issue appears to come from a button that must be clicked to verify a visitor is human. If that experience is interrupted, the check can fail and the agent gets booted out.
The Problem With Old Bot Detection
That Walmart example highlights a growing gap. The technology used to verify humans and protect sites from spam may not fit the agent-first era of the web.
To address this, industry partners including Meta, Walmart, Stripe, Sierra, Genesys, Rocket, NiCE, and Decagon have begun working on an open standard. It would define how AI agents communicate with businesses, helping separate good bots acting for users from bad ones. Meta said the protocol will focus on agent-to-agent communication for online commerce.
In the meantime, consumer confusion is widespread. A social media post from Kevin Wang on October 5, 2026, complained that Walmart’s attempt to stop agents from making purchases had gone too far, blocking an actual human from signing in and buying something directly.
Airlines and Travel Booking
Flight booking is one of the main use cases pitched for agents, but many people report airlines rejecting their requests.
Delta said it is taking steps to protect customers from unauthorized automated activity. It said that opening up to AI agents would have to be done with “security and the customer experience in mind.”
“While Delta does not currently have a partnership or integration that enables a third-party AI agent to shop for or book Delta flights on a customer’s behalf on our digital platforms, we’re continuing to evaluate how new technology, including external AI agents, could enhance the way customers engage with Delta,” said Delta’s General Manager of Global Communications, Heena Chavda.
United pointed to its Terms of Use, which say users agree “not to use any robot, spider, other automatic device, or manual process to monitor or copy this website or the content contained therein or for any other unauthorized purpose without United’s prior written permission.” United did not respond to a follow-up about whether it blocks specific personal AI agents like Muse.
Which Brands Are Reported to Block Agents
Early adopters have named a range of brands reportedly blocking AI agents, including Yelp, eBay, Zillow, Pizza Hut, Adidas, and various airlines. Some believe the blocking has recently increased.
A couple of people said eBay suspended their accounts over their use of agentic AI. Another complained that Google kicked out Instinct while it was cleaning up their Gmail inbox.
Yelp said it does not permit non-human traffic unless the agent has paid to access Yelp’s content and data through its data licensing program. That means agents trying to get a quote, add a user to a waitlist, or book a table will likely fail without a formal partnership.
eBay said its approach is not to prohibit all third-party shopping agents from completing purchases. Instead, its policies restrict unauthorized agents and actions like automated scraping and model training.
Adidas, Zillow, and Pizza Hut either did not respond or declined to comment by publication time.
Where Cloudflare Fits In
Cloudflare offers sites protection from AI agents that could train on their data or manage other automated activity. Some suspect Cloudflare and similar content delivery networks are disrupting Muse traffic.
That suspicion is tied to a change to crawler defaults on September 15, which allows site owners to block AI training while allowing other types of bots. Existing sites previously set to block AI bots for security reasons were then shifted to block AI agents on any pages with ads.
When asked about the blocking of personal AI agents like Muse, Cloudflare said it had no specific data to share at this time. It pointed to its free public data hub, Cloudflare Radar. The site shows increased bot activity but does not distinguish good bots from bad ones.
Cloudflare also has a vested interest in managing AI traffic. It runs a marketplace where AI bots pay for data they access, and it recently began testing a web browser built specifically for AI agents.
Why Partnerships and Standards Matter
Given how fast the space is evolving, Meta’s decision to form specific brand partnerships for Muse access looks like a practical path. So does its push for new standards. Both help assure customers that its agent is welcome at partner sites, so access issues can be reported as bugs.
Meta also maintains a list of “connectors,” or partners, inside the Muse app, and that list continues to grow. Many newly announced partners have not yet appeared in it. Given Muse’s rapid expansion, including partnered tools for small businesses, a bigger reorganization of the connector list is likely soon.
“Turning away a personal agent means turning away the customer behind it. We’d rather work with businesses to address the underlying concerns than see them lose that customer,” Meta said in its announcement about the standard. “There is a path that is good for users and good for businesses. It starts with clear norms, gives businesses more predictable control, and evolves toward a more efficient way for agents to work together.”
What Comes Next
For now, the experience is uneven. Some brands are partnering with agent makers, others are blocking automated traffic, and many users are caught in the middle without knowing why a purchase or booking failed.
The open standard effort may eventually make those interactions smoother and more predictable. Until then, AI agents websites will keep running into gates built for a human-only web, and the businesses behind those gates will have to decide how much access to allow.
