Shopify lets AI agents finish the checkout, not just fill the cart

Shopify is pushing its bet on "agentic commerce" a step further, opening up checkout itself to AI agents that operate directly inside a shopper's browser.

The company is expanding support for WebMCP, an open protocol that lets a website expose specific actions to an AI agent running alongside it, rather than forcing that agent to scrape and click through a page like a human would. Until now, WebMCP integrations on Shopify storefronts mostly covered browsing and cart-building. The new rollout extends that same machine-readable interface to checkout, meaning an agent can update shipping information, swap a payment method, apply a discount code, or place the order itself, provided the buyer has explicitly authorized it to act.

The distinction Shopify is drawing is between an agent that merely narrates a purchase back to a chatbot and one that actually transacts. Because WebMCP runs client-side in the buyer's own browser session, the agent inherits the same authentication and payment context the shopper already has, rather than requiring a separate token exchange or a merchant-side integration with a specific AI vendor. Shopify frames this as a safer, more auditable path than agents that log in with scraped credentials or bypass a store's normal checkout flow entirely.

For merchants, the move is largely passive: stores already running Shopify's checkout get the WebMCP hooks without custom development, though Shopify is expected to give merchants controls over which checkout actions an agent can trigger and how authorization is confirmed. That matters because checkout is the one part of the funnel retailers are most protective of, it is where fraud risk, discount abuse, and payment errors actually cost money, so Shopify's pitch leans heavily on the idea that a buyer-authorized agent is still bound by the same rules as a buyer typing in the fields themselves.

The timing lines up with a broader scramble among platforms to define how AI shopping agents interact with online stores. OpenAI, Google, and others have been building or backing similar agent-to-commerce standards over the past year, each trying to avoid a future where AI assistants either get locked out of checkout entirely or have to resort to fragile browser automation to complete a purchase. Shopify, which powers a large share of independent e-commerce sites, has an obvious incentive to make sure its stores are among the easiest for those agents to buy from.

Whether shoppers actually want an AI agent handling the final step of a purchase, rather than just research and comparison, is still an open question. But by wiring agent access straight into checkout, Shopify is betting that "agent completes the purchase" becomes a normal path to a sale, not just a novelty, and that merchants would rather shape that behavior now than have it happen around them via unofficial workarounds.