A Court Just Ruled AI Agents Can Shop For You. Your Site Is Next

On 4 August 2026 the Ninth Circuit reversed Amazon's injunction against Perplexity's Comet browser, holding that when a user directs an AI agent, it is the user accessing the site rather than the AI company. For businesses, it means agents will increasingly visit your site as your customer, and your site was built to persuade a human.

Amazon sued Perplexity in late 2025 over Comet, a browser that can log into your Amazon account and complete a purchase on your behalf. In March a federal judge granted a preliminary injunction and the agent was blocked. On appeal, that was undone. The court's reasoning is the part worth keeping: the agent is the user's hands, not a trespasser.

This was never really a case about shopping

Amazon has been closing its site to outside agents, and its advertising business, worth around $56 billion, depends on humans browsing listings, seeing sponsored placements, and being nudged toward things they did not set out to buy.

An agent that goes straight to a purchase skips all of it. Read that way, Amazon was not defending its customers from a rogue bot. It was defending the part of the visit that makes it money.

Why this applies to a site with no checkout at all

For twenty-five years the craft of a website has been persuasion. Layout, hierarchy, social proof, the order in which things appear, the moment the price is revealed. Every one of those choices assumes a person is being moved through something.

An agent is not moved through anything. It arrives, extracts what it needs, compares you against two competitors, and reports back a summary the prospect reads instead of your site.

And you have less ground to refuse it than you might assume. If the agent is legally the customer acting as the customer, blocking it starts to look less like security and more like refusing to serve someone because of how they chose to shop.

What does an AI agent actually need from your page?

Very little of what most sites lead with, and most of what they hide.

Page elements built for a human visitor compared with what an AI agent needs

Built for a human	Needed by an agent
Hero statement and brand promise	What you do, in plain terms
Scroll-triggered social proof	Who you serve and who you do not
"Contact us for pricing"	Price, range, or the variables that set it
Case studies as narrative	Scope, timeline, and constraints as facts
A form that starts a conversation	A comparable answer it can report

Notice the pattern. The things an agent needs are exactly the things many businesses withhold on purpose, to force a conversation. That tactic was designed for a visitor who could be persuaded to have one.

The comparison problem

Agents do not evaluate you alone. They evaluate you against alternatives, in the same pass, using whatever each site makes available.

If your competitor states a price range and you say "every project is bespoke," the agent does not conclude that you are premium. It reports what it could establish, and the gap reads as an absence rather than as exclusivity.

Agent-mediated buying is the uncomfortable shift. Ambiguity used to be a negotiating position. In an agent-mediated comparison it is simply missing data.

What to do about it now

1. Read your main service page and list what an agent could state as fact after one pass.
2. Put the answers to your five most common sales questions in text, not in a PDF or a video.
3. Make your differentiation checkable rather than adjectival. "Same-week onboarding" beats "fast and responsive."
4. Check that you are not blocking the agents that would carry your information, and decide it deliberately rather than by plugin default.

None of this means abandoning persuasion. Humans still buy. It means your site now has two readers with completely different needs, and only one of them can be charmed.

What the ruling did not settle

The ruling is worth weighing carefully. The Ninth Circuit found Amazon unlikely to succeed on its Computer Fraud and Abuse Act claim at the preliminary injunction stage. That is not the same as a final judgment, and the underlying dispute continues.

Nor does it strip site owners of every option. Terms of service, rate limiting, and authentication all still exist. What narrowed is the argument that an agent acting on a user's instruction is inherently unauthorized access simply because it is software.

So the honest summary is that the legal ground shifted toward agents rather than settling under them. Businesses planning around a blanket right to exclude should notice that the direction of travel is against them.

The traffic you cannot see in analytics

There is a measurement problem hiding inside this. Agent visits do not behave like human sessions. They may arrive without normal browser signals, complete in seconds, and never trigger the events your reporting depends on.

Which means the first sign that agents are evaluating your business is unlikely to be a chart. It is more likely to be a prospect who arrives already knowing your price, your timeline, and how you compare to two competitors you have never heard them mention.

Broader observation of agentic activity suggests browsing dominates and checkout is rare, with only a small fraction of agent activity touching payment routes. The implication is that agents are mostly researching, not buying, which is exactly the stage where your positioning is decided.

Does this mean you should rewrite your website?

No. It means adding a second layer, not replacing the first.

Humans still buy, and persuasion still works on them. What changes is that a meaningful share of first contact now happens through something immune to persuasion, which then hands a summary to the human. Your site has to survive being read flatly before it ever gets the chance to be read emotionally.

The practical test is simple. Strip your key page of images, formatting, and sequence. Read what is left as plain statements. If the essential facts are not in that residue, an agent will not find them either.