On 8 September 2026 Meta launched Muse, a free personal agent (with paid tiers) available on iOS, Android, muse.ai and WhatsApp. Within a week it became the No. 1 free app in the U.S. App Store, ahead of ChatGPT. Early users described switching auto-insurance policies, hunting discount codes and loading grocery carts autonomously.
By 21–22 September—and with renewed CNN Business coverage on the 28th—Amazon cut Muse off from Amazon.com. Users see a popup that continued access by an "unauthorized AI agent" violates Amazon's Conditions of Use. Amazon says Meta never notified it, the agent does not identify itself while browsing, and it appears to capture and store customer credentials, creating privacy and security risks.
Meta has said Muse "has no visibility into people's passwords or payment methods" and that shared credentials go into secure storage. The agent runs on a secure virtual machine with its own browser; a monitoring agent called Sentinel must approve anything Muse sends to the internet, and the user confirms sensitive actions. If a service has a public API, Muse connects with user-provided credentials; if not, it "can use the service through a browser the way you would."
That last sentence is the core of the fight. Amazon argues third-party applications that purchase on a customer's behalf should operate openly and respect the merchant's choice to participate. It cites food-delivery apps and online travel agencies as analogies: the restaurant or airline agrees to the channel. Muse browsing without self-identification, Amazon says, amounts to an undisclosed third party moving through accounts, orders and history.
Resy, the dining-reservation platform, has hardened a zero-tolerance line against unapproved bots: automated interactions can trigger account bans. Concurrent reporting notes Resy allows authorized integrations with services such as ChatGPT and Claude, but treats Muse as an unapproved third-party agent that threatens reliability and diner fairness.
The commercial irony is sharp. Amazon and Meta are partners: Amazon products have been purchasable inside Facebook and Instagram since 2023, and in April Meta signed a multibillion-dollar deal to run agentic workloads on Amazon Graviton chips. Yet Amazon has spent the past year trying to keep outside agents off its site—suing Perplexity over the Comet browser and moving to block shopping agents from Google and OpenAI.
The legal front matters. Amazon won a preliminary injunction against Perplexity in March and lost it on 4 August, when the Ninth Circuit held that the user—not the AI company—was accessing Amazon's computers under federal anti-hacking law. On 10 September the court denied rehearing, but left open claims built on contracts and terms of service. Muse's popup cites Conditions of Use, not hacking.
Ad stakes are high: Amazon generated more than $68 billion in ad revenue last year, a business that depends on people browsing pages and seeing sponsored products. An agent that compares prices outside Amazon's funnel threatens that inventory. Amazon contrasts its own "Buy for Me," which identifies itself and lets brands opt out, plus Alexa for Shopping.
Neural Pulse reads the episode as the first major access war of consumer agentic commerce. It is not merely "bot vs. web": it is a fight over who owns the customer relationship, who captures purchase intent and who sets agent-identification rules. Without standards for agent identity and merchant consent, each platform will improvise unilateral blocks.
For regulators and standards bodies, Muse vs. Amazon foreshadows questions 2027 cannot dodge: Must an agent always self-identify? Is end-user consent enough? What minimum logging is required when an agent touches order history or reservations? The delivery-app analogy only works with a bilateral contract; Muse bets that the user's browser is sufficient mandate.
Meta did not immediately comment in GeekWire's initial coverage; Amazon said it was in direct conversation and declined to discuss litigation. Meanwhile Muse remains a case study in viral adoption: App Store #1 in days, platform friction in weeks.
Neural Pulse closes with a sober reading: the agent that "does everything for you" collides with platforms that live on controlling everything. Until industry and regulators agree on agent identity, merchant opt-in and credential limits, expect more "unauthorized agent" popups—and more legal battles over terms of service, not only hacking statutes.
