Shopify’s own framing of this change is refreshingly plain: an AI agent running in your browser can now inspect a checkout, adjust the details, and submit the order — but only after the buyer authorizes the purchase. That last clause is the whole story. Everything else is plumbing.
I want to sit with that for a second, because it’s the first time the “AI agent does your shopping” pitch has come with a clear answer to the question everyone actually asks me: wait, so it can spend my money?
What actually changed
Shopify already supported something called WebMCP on its storefronts and carts. In practice, that meant a browser-based agent could look through a merchant’s inventory, search for products, and drop them into a cart. Useful, but it stopped at the most interesting door. The agent could fill your basket and then had to hand you the keyboard.
Now that door is open. Shopify has extended WebMCP support to checkout itself, and added three new tools agents can call:
- get_checkout — the agent reads what’s currently in the checkout. Items, address, shipping choice, the state of things.
- update_checkout — the agent changes those details. Swap the delivery address, pick a different shipping option.
- complete_checkout — the agent places the order, after the buyer authorizes it.
It’s rolling out to all eligible Shopify merchants, and that reportedly includes stores using Shop Pay. So this isn’t a pilot with three boutique brands. It’s a default capability spreading across a large chunk of the internet’s small and mid-size retail.
Why three tools instead of one
If you’re not technical, the split might look like overengineering. It isn’t. It’s a permission design.
Reading is cheap and low-stakes. Editing is medium-stakes — annoying if wrong, not catastrophic. Paying is the one that empties an account. By separating them into distinct tools, Shopify makes it possible for the agent, the browser, and the merchant to treat each action differently. Reading a checkout doesn’t need a confirmation dialog. Completing one does.
Compare that to the alternative everyone feared, where an agent just gets handed your stored card and does whatever it interprets as helpful. Naming the payment step separately means it can be gated separately.
The part I’d watch closely
“With the buyer’s authorization” is doing enormous work in that sentence, and the quality of this whole system depends on what authorization looks like in practice.
Good version: you see the order, the total, the address, the shipping method, and you approve that specific purchase. Bad version: a checkbox buried in a settings panel that you clicked once in March and forgot about, which now quietly covers every purchase an agent makes on your behalf forever.
Both technically satisfy “the buyer authorized it.” Only one of them is something I’d want my parents using. This is the thing to ask about whenever a company tells you its agent needs your approval — approval of what, and how often?
Untangling one common confusion
People keep mixing up two different flavors of AI shopping, so let’s separate them.
One flavor lives inside a chat app. You talk to an assistant, it shows you products, and the transaction happens through that platform’s own machinery. Shopify says millions of its stores became discoverable inside tools like ChatGPT and Microsoft Copilot in March 2026.
This announcement is the other flavor. The agent is in your browser, on the actual merchant’s actual site, using tools the site exposes to it. You could, in principle, watch it work. The merchant’s checkout is still the checkout. Nobody is being replaced by a middleman layer.
I find the second version easier to trust, for the same reason I’d rather watch someone use my credit card at the counter than mail it to them.
Why merchants are moving on this now
Shopify reported that AI-driven traffic to its stores grew eight times year over year in Q1 2026. Whatever you think about agents doing your shopping, that number explains the urgency. If a growing share of visitors arrives as software, a store that can’t talk to software is a store with a locked front door and a very confused customer outside it.
That’s the practical logic behind opening checkout. Traffic that can browse but can’t buy isn’t traffic. It’s window shopping at scale.
What this means for you
If you’re just a person who buys things online, nothing changes today unless you’re deliberately using an agent that supports this. You won’t wake up to mystery packages.
But the shape of shopping is shifting, and it’s shifting in a direction where the interesting question stops being “can the AI find me a good deal” and becomes “what exactly did I agree to.” Learn to read the authorization prompt. It’s the new version of reading the fine print, except it’ll flash by in two seconds and have a friendly button on it.
Shopify built the separate payment step for a reason. Use it.
🕒 Published: