Websites are closing their doors to AI agents

The Verge reports that users of Meta’s Muse, xAI’s Grok, OpenAI’s Dots, and Instinct have hit blocks on major sites in recent weeks. Yelp told TechCrunch it only allows agents that pay for its data licensing program. Delta is preventing agents from booking tickets for users. JPMorgan Chase and Charles Schwab say they’re blocking agent access to accounts over security concerns. Cars.com and Amtrak, which once worked with agents, are among sites users say are no longer reachable.

Amazon’s fight with Perplexity last year — bans, a lawsuit, a temporary order, then an appeals court overturn in August — set the tone. Muse has since drawn Amazon’s claim that continued access violates site policies. Reports also put Grok, Instinct, and Dots in the same boat on Amazon. Meta’s response has been partnerships with Walmart, Gap, Sephora, Best Buy and others, plus Shopify opening storefronts to agents — workarounds when the open web won’t cooperate.

We’re watching the agent pitch meet the internet as it actually is: a patchwork of ads, liability, and anti-bot systems that treat a helpful assistant a lot like a scraper or a fraud script.

The useful read isn’t that agents are dead. It’s that the value of an agent shrinks every time a high-intent surface — banking, travel, shopping — refuses the handshake. EquiStamp’s Chris Canal told The Verge that if companies actively block agents, there are simply fewer useful things those agents can do. That’s a product problem for the labs, and a negotiating problem for everyone else.

Cloudflare’s one-click AI crawler blocks and bot defenses make the friction worse even when no one is targeting agents by name. Canal’s warning lands: more sites may push humans through harder “prove you’re not a robot” flows, which makes the web worse for people while labs and platforms argue over who gets to act on their behalf.

Our take: agents that only work on partnered storefronts are still useful — they’re just not the universal digital employee the demos promised. Permissioned rails and paid data deals look likelier than a free-for-all. I’m watching whether Amazon’s litigation and bank security blocks become the default template.

Amazon previously banned Perplexity’s agentic shopping and sued; an appeals court overturned a lower-court order stopping Perplexity agents from shopping on Amazon in August, and Amazon filed an amended complaint. Meta has argued that turning away a personal agent turns away the customer behind it.