The news
Shopify agentic checkout is rolling out. On September 28, Shopify (SHOP) said browser-based AI agents can read, update and complete eligible checkouts on merchant storefronts, with the shopper required to confirm an order before an agent submits it.
The feature runs on WebMCP, which Shopify's developer documentation describes as a proposed web standard that lets AI agents call tools a website registers instead of imitating clicks on a page. Shopify already exposed WebMCP tools for catalog search, carts and store navigation on every Liquid storefront and on storefronts built with the Hydrogen developer preview. The September 28 developer changelog extends that approach to checkout.
Four checkout tools are involved, according to Shopify's documentation. get_checkout reads the state of an order. update_checkout changes fields such as contact details, delivery options, discounts and payment selection. complete_checkout places the order, and navigate_to_storefront sends the agent back to the store without buying. The changelog says the tools work inside the existing checkout interface, add no new APIs and require no merchant setup. They register only on eligible checkouts: Shopify's documentation excludes three-page checkouts without Shop Pay, B2B, embedded and mobile SDK checkouts, checkouts with another shop's merchandise, draft orders, order edits and payment collection, plus app-defined checkout extension interactions.
Shopify put guardrails around payment. Its documentation says an agent must show the buyer the current order and total and get permission before calling complete_checkout, and must ask again if the total changes. A Web Bot Auth signature or a Shop Pay approval does not count as that consent on its own. Agents can pick saved Shop Pay cards or use Shop Pay approvals, but Shopify says Checkout WebMCP does not accept new card details, and challenges such as 3D Secure authentication are handed back to the shopper.
Browser support is narrow for now. Shopify says agent support for WebMCP is limited to Chromium-based browsers, and its checkout documentation notes that Chrome 153 needs tool arguments passed as text strings while Chrome 155 is planned to accept objects directly. Shopify staff product manager Gil Greenberg told TechCrunch the capability is rolling out to all eligible merchants. “Shopping with an agent shouldn't feel like watching paint dry,” he said.
The numbers
- Checkout WebMCP tools
- 4
- Launch date
- September 28, 2026
- Instinct Series C (TechCrunch)
- $1 billion at a $10 billion valuation
Why CEOs should care
For merchants and e-commerce leaders, the practical change is that some orders may now be assembled by software acting for a shopper. Because Shopify says no merchant setup is required, the question is not whether to integrate but whether your checkouts are eligible and behave well when an agent drives them. Map which flows Shopify excludes, then have your team run test purchases with an agent in a Chromium browser, covering checkout extensions, custom fields and discount logic, since Shopify says blocking UI extensions hand control back to the buyer. Neither the changelog nor the documentation describes an opt-out, so confirm with Shopify which controls exist before the holiday peak.
CFOs and payments teams should look at dispute and fraud exposure. Shopify's consent rules, which require showing the total, getting permission and re-confirming if the total changes, are designed to limit “I didn't order this” claims, but they rely on the agent developer to follow them. Ask your payments provider how agent-initiated orders will be flagged, how chargebacks will be handled, and whether reporting can separate agent traffic from human traffic so conversion and return rates stay meaningful.
CISOs should treat shopping agents as a new class of client. Shopify's statement that a Web Bot Auth signature alone is not buyer consent shows that proving a bot's identity and proving a customer's intent are separate problems. Review bot-management rules so legitimate agents are not blocked while defenses against scraping and credential stuffing stay in place.
The bigger picture
Shopify appears to be positioning itself as a default rail for agentic commerce. TechCrunch noted that while retailers such as Amazon block AI agents from buying for users, Shopify offers a hosted Model Context Protocol server alongside WebMCP, both using its Universal Commerce Protocol. The competitive stakes are rising. On the same day, TechCrunch reported that Instinct, a consumer AI agent that books travel and makes purchases over text message, raised a $1 billion Series C at a $10 billion valuation, and its Shopify coverage cited partnerships with Instinct and with Meta's Muse agent. For retailers, the risk is that an agent, not the shopper, chooses the store; the upside is less friction at the moment of purchase.
What’s next
Watch for Chrome 155, which Shopify's documentation says is planned to accept tool arguments as objects, and for support in non-Chromium browsers. Merchants should also look for Shopify guidance on reporting agent-originated orders and on any controls to limit agent checkout, which the September 28 materials do not describe.
What “Fact-checked” means
Fact-checking means testing a story’s facts against the evidence before it is published. This story went through at least two separate checks before this version was published.
- What we checked
- Its names, figures, dates, job titles, quotes and who said what were checked against the story’s sources, including its main source where it could be opened. The headline was checked for accuracy and overstatement.
- How
- A first check reviewed the whole story. If it passed, a second, skeptical check went back to the sources to look for mistakes in the most important facts. If a check flagged the story, it was edited to fix the problems found, and a separate re-check then reviewed the whole story again.
- Who
- The checks are made with our newsroom’s technology tools, as steps kept separate from the writing, under rules set by our editor, Hussein Mukhtar. A story the checks still flag is not published automatically; it is held for the editor, who decides whether it is fixed, published or dropped.
- If something is wrong
- “Fact-checked” does not mean error-free. If a material error is found after publication, we correct the story and add a note saying what changed. Report an error
