TechCrunch AI ★ 72 4 min

The next hurdle for AI agents: getting websites to let them in

TCAppsCommercee-commercemuseAI agents

🔗 https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/

📌 AI 代理人想幫你買東西,網站卻把門關上了

TL;DR:Meta Muse、ChatGPT Dots 等個人 AI 代理人正大量被電商、航空網站攔截,問題出在人機驗證機制還沒跟上 agent 時代。

你讓 AI 代理人幫你訂機票、買菜、訂餐廳位子,結果它卡在一個「請點擊確認你是人類」的按鈕前,任務失敗。這不是單一網站的個案,而是這波消費級 AI 代理人正在全面撞上的牆。

🤔 從回答問題到代為行動,門檻變了

Meta 的 Muse、Instinct,以及 ChatGPT 的 Dots,代表新一代消費 AI:它們不只是聊天,而是真的能訂機票、訂餐廳、下單買菜。使用者不需要懂技術、不用自己架設 agent,但代理人要完成任務,得先「進得了」對方的網站。

🧩 攔截有兩種:故意的,和不小心的

TechCrunch 報導指出,Amazon 已明確封鎖 Meta Muse 存取其商品目錄與購物流程。但更多案例其實是誤傷:Walmart 雖與 Muse 有正式合作,使用者仍反覆回報購買失敗,官方解釋問題出在「請驗證你是人類」的按鈕,一旦代理人操作流程被中斷,驗證就會失敗,代理人隨之被踢出。社群媒體上還有 Yelp、eBay、Zillow、Pizza Hut、Adidas 以及多家航空公司被提及有類似攔截情況,甚至有人反映 eBay 因使用 agentic AI 而被停權。Delta 向 TechCrunch 表示目前並未與第三方 AI 代理人有訂票整合,若要開放必須同時考量安全與顧客體驗;United 則引用其使用條款,禁止未經書面許可的自動化存取。Yelp 更明確表示:非人類流量若未透過其資料授權方案付費合作,一律不允許。

💡 問題根源:反機器人機制沒有區分「好代理人」與「壞機器人」

報導指出,Cloudflare 等 CDN 業者在 9 月 15 日調整了爬蟲預設設定,允許網站封鎖 AI 訓練用途的爬取,但原本為安全理由設定封鎖機器人的網站,連帶也擋掉了廣告頁面上的 AI 代理人流量。Cloudflare 對此表示沒有具體資料可說明是否與 Muse 等代理人攔截有關,並指向其 Radar 公開資料平臺,但該資料無法區分善意與惡意流量。為解決這個問題,Meta、Walmart、Stripe、Sierra、Genesys、Rocket、NiCE、Decagon 等業者已開始合作制定一套開放標準,專注於電商場景下代理人與企業系統之間的通訊協定,目的是分辨「代表使用者行動的好機器人」與「惡意機器人」。

⚠️ 使用者根本不知道是誰在擋

這次報導最值得注意的一點是「混亂」本身:使用者分不清是網站故意封鎖,還是傳統反垃圾機制誤判,結果既怪罪零售商,也怪罪代理人服務商。Meta 目前的作法是與特定品牌建立正式合作(如 Walmart),並在 Muse App 內維護一份不斷擴充的「連接器」清單,確保已知合作夥伴的存取是被允許的;但許多新公布的合作夥伴尚未出現在清單中,顯示這套名單仍在整理擴充階段。

🎯 實務啟示

對開發 agentic 商務應用的工程師來說,這是一個清楚的訊號:純粹依賴爬蟲式自動化去模擬人類操作網站,長期注定與反機器人系統對撞。真正可規模化的路徑是走向正式的 agent-to-agent 協定與 API 層合作,而不是讓代理人偽裝成瀏覽器使用者去點擊驗證按鈕。評估導入 AI 購物代理人前,務必先確認目標網站是否有正式合作或 API 支援,否則踩到反機器人機制只是遲早的事。

🔗 來源

#AIAgents #AgenticAI #Ecommerce #WebSecurity #BotDetection #MCP #Cloudflare #Meta #ConsumerAI #TechPolicy

原始資料 TechCrunch AI · 收集於 2026-10-06
來源原標題
The next hurdle for AI agents: getting websites to let them in
作者
Sarah Perez
原始標籤
TC · AI · Apps · Commerce · e-commerce · muse · AI agents
原始連結
https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/

摘要原文

Personal AI agents, like Meta’s Muse, Instinct, ChatGPT’s Dots, and others, are kicking off a new wave of consumer AI that involves more than just responding to queries. These AI agents can actually get things done on users’ behalf, like booking flights, making dinner reservations, ordering groceries, and more, all without having to be technical enough to set up OpenClaw or some other agent on your own computer. But consumers adopting these agents are often running into issues when the website on the other end of their request blocks the AI from completing the job. Most recently, Amazon began blocking Meta’s Muse AI agent from its retail site, meaning that the agent could no longer browse or make purchases from its product catalog. However, the problem is not limited to Amazon or Muse. User complaints across social media indicate their agents are often running into similar blocks. Some of these are intentional, like Amazon’s, while others are the result of websites’ traditional anti-bot measures designed to protect against spam and malicious activity. What’s not clear to the end user is whether or not the block is accidental on the website owner’s part, which leaves them frustrated with both the service provider or retailer and the agent trying to facilitate the transaction. For instance, TechCrunch has seen a han d ful of complaints on social media claiming that Muse couldn’t complete a purchase on Walmart’s retail website. ( NBC also reported that this was a problem Walmart had faced in its tests of the AI agent.) But a spokesperson for Walmart told us these weren’t intentional. In fact, Walmart is partnered with Muse, as was announced at Meta’s Connect developer conference in September. The company said it wants to be where its customers are, and that now includes being available through AI agent experiences. The issue that Walmart customers often appear to be running into (see below) is that the website presents a button that has to be clicked to verify the visitor is human. If that experience is interrupted, the check could fail, and the agent gets booted out. It’s an indication that the current technology we use to verify humans and keep websites safe from spam and bots may not be the best fit for the agent-first era of the web we’re now moving into. To address this problem, industry partners including Meta, Walmart, Stripe, Sierra, Genesys, Rocket, NiCE, and Decagon have begun working on an open standard that would dictate how AI agents can communicate with businesses, helping to separate the good bots acting on behalf of the user and the bad. This protocol will be specifically focused on agent-to-agent communication for the purposes of online commerce, Meta said in a blog post. This is frustrating. @Walmart in their attempt to stop agent from making purchases has gone too far and is essentially blocking actual human from making purchase on their website. I tried to purchase something directly and I can't even sign in. pic.twitter.com/CRAgkrCCa0 — Kevin Wang (@buzaza) October 5, 2026 In the meantime, consumer confusion abounds. Although Walmart is at least trying to be accessible via AI agents, other companies aren’t so keen on the idea or haven’t fully embraced the technology. For example, flight booking is currently one of the main use cases being positioned for agents, but many people have reported issues with airlines rejecting their agents’ requests. Delta, for instance, told us that the company is taking steps to protect customers from unauthorized automated activity, and that if it were to open up to AI agents, it would have to be done with “security and the customer experience in mind.” “While Delta does not currently have a partnership or integration that enables a third-party AI agent to shop for or book Delta flights on a customer’s behalf on our digital platforms, we’re continuing to evaluate how new technology, including external AI agents, could enhance the way customers engage with Delta,” said Delta’s general manager of Global Communications, Heena Chavda, in response to our questions about whether or not it was blocking agents, as some users complained. United was not quite as direct as Delta, but a spokesperson pointed us to the part of its Terms of Use policy, which says that the user agrees “not to use any robot, spider, other automatic device, or manual process to monitor or copy this website or the content contained therein or for any other unauthorized purpose without United’s prior written permission.” (United didn’t respond to a follow-up question about whether it was blocking specific personal AI agents, like Muse.) Early adopters’ complaints across social media have referenced a number of brands that are reportedly blocking AI agents, including Yelp , eBay , Zillow , Pizza Hut , Adidas , and various airlines . Some believe that the blocking activity seems to have recently increased . A couple of people even said eBay suspended their accounts because of their use of agentic AI. Another complained that Google kicked out Instinct while it was cleaning up their Gmail inbox for them. Looks like @adidas won't get my business tonight 😪 pic.twitter.com/DXcPYE5S6O — Martin Kessler (@kesslerIO) September 28, 2026 Despite the push to have agents book tables at restaurants and other tedious tasks, Yelp told us that it doesn’t permit non-human traffic on its platform unless the agent has paid to access Yelp’s content and data through its data licensing program . That means agents trying to use its site to get a quote, add a user to a waitlist, or book them a table will likely fail if they don’t have a formal partnership with Yelp. eBay told TechCrunch that its approach is not to prohibit all third-party shopping agents from completing purchases. Instead, its policies restrict unauthorized agents and actions, like automated scraping and model training. Adidas, Zillow, and Pizza Hut either didn’t respond or declined to provide a comment by the time of publication. One major company involved in this space is Cloudflare, which offers sites protection from AI agents that could be training on its data and managing other automated activity. Some suspect that Cloudflare and other content delivery networks (CDNs) like it are currently disrupting Muse traffic. This is attributed to a change to crawler defaults on September 15, which allows site owners to block AI training while allowing other types of bots. Existing sites that were previously set to block AI bots for security reasons were then shifted to block AI agents on any pages that had ads. However, when we asked if Cloudflare had any insight into what was happening with the blocking of these personal AI agents, like Muse and others, the company said it didn’t have any specific data to share at this time. It pointed us instead to its free public data hub, Cloudflare Radar . The site shows the increase in bot activity (which Cloudflare has also commented on previously), but it doesn’t help differentiate between the good bots and the bad ones. Cloudflare also has a vested interest in mitigating AI traffic to websites, as it now runs a marketplace where AI bots have to pay for the data they access. It recently began testing a new web browser built specifically for AI agents. Given the rapidly evolving space, Meta’s decision to form specific brand partnerships for Muse access seems to be the right way to go, as is its decision to focus on new standards. In doing so, it assures its customers that its agent, at least, is welcome at these partners’ sites — so any issues with access would be reportable bugs. Meta also maintains a list of “connectors” (a.k.a. partners) inside the Muse app, which continues to grow. Many of Meta’s newly announced partners haven’t yet shown up in this list. But given Muse’s rapid expansion , which now includes partnered tools for small businesses , a bigger reorganization of Muse’s connector list is likely soon to be underway.

由 claude-code/sonnet 自動生成