Shopify opens checkout to browser-based AI agents

Shopify said Monday that browser-based AI agents can now finish checkout on eligible merchant stores — including Shop Pay — using new WebMCP tools that read and update the active checkout and submit the order only after the buyer authorizes it.

Some retailers are blocking shopping agents. Shopify is wiring checkout itself so an agent can use it. That is the difference between an assistant that browses and one that can spend your money after you say yes.

On Monday, 28 September 2026, Shopify’s developer changelog said browser agents can now read and update Shopify checkouts using WebMCP tools for checkout. WebMCP is a way for an AI agent in the browser to call tools the page itself offers, instead of clicking through a page built for a person. The post is titled “WebMCP support for checkout,” and it is dated September 28, 2026. Those lines are Shopify’s.

The tools work on the checkout already open in the buyer’s browser. The buyer sees the same checkout the agent is reading. When the page needs the buyer, the tools hand control back. Shopify’s examples are 3D Secure, the extra check a bank runs on a card payment, and a checkout add-on that stops the page until the buyer acts. The buyer finishes that step. The product docs add that the buyer also handles a Shop Pay login or a payment challenge on the page, and confirms the order before the agent places it. Shop Pay is Shopify’s accelerated checkout. Those lines are Shopify’s.

What an agent can call, as the changelog lists it. navigate_to_storefront sends the tab back to the store. get_checkout reads the checkout, including messages and, after the purchase, the order receipt. update_checkout changes the fields Shopify supports. complete_checkout submits the order only after the buyer confirms. The docs say checkout registers these tools on eligible checkouts, and that the return-to-store tool is there only when the store has an online storefront. Eligible is Shopify’s word for which checkouts get the tools. The docs also say update_checkout can replace contact details, how the order is delivered, discount codes, extra fields the store collects, and payment. Changing those fields does not place the order.

Where the tools run, as the changelog puts it. They run inside checkout-web, the software that already draws the checkout page. They use the same state as that page. Shopify says they do not add a new API. An API is a separate door that outside software uses to talk to a service. Shopify also says a merchant does not have to configure the tools. The docs say the browser tools and Shopify’s server-side checkout tools share the same checkout record. Those lines are Shopify’s.

Storefront and cart tools were already live. With checkout added, Shopify says a browser agent can help across the whole trip: finding a product, managing the cart, going through checkout, and reaching the order confirmation. The changelog says the tools serve agents that shop the store from their browser. Those lines are Shopify’s.

The buyer still has to say yes. The docs say that before complete_checkout, the agent has to show the buyer the current order and the total, and get permission to place it. A Shop Pay approval, and a checkout marked ready, do not count as that permission. If the total changes, the agent has to ask again. If the page opens a review step, the buyer reviews the order there, and the agent submits only after the buyer authorizes it. If a payment challenge appears, the buyer finishes it on the page. Only a completed status means the order is placed. Shopify also tells the agent to treat text from the store, and from other companies on the page, as checkout data. That text can try to give the agent new orders. It is not an instruction to follow. Those lines are the docs’.

TechCrunch reported the same day that the rollout includes Shop Pay. Sarah Perez wrote that agents can now read the checkout, update it, and submit the transaction once the buyer authorizes it, without screenshots or scraping the page. Scraping means pulling words off a page built for a person. TechCrunch said the update introduces get_checkout, update_checkout, and complete_checkout, so an agent can inspect a checkout, change an address or a delivery option, and place the order after the buyer says yes. TechCrunch said Gil Greenberg, a staff product manager who works on shopping agents at Shopify, wrote on X that the tools are launching for all eligible Shopify merchants, including Shop Pay. TechCrunch quoted him telling agents that work in the buyer’s browser to use these WebMCP tools instead of navigating HTML built for humans. HTML is the markup a person clicks. TechCrunch also wrote that agents such as Muse and Instinct already have direct partnerships with Shopify for agent shopping, and that the Instinct partnership was announced the same day. TechCrunch set the news against retailers that are blocking shopping agents, and named Amazon and Adidas. Those lines are TechCrunch’s.

In plain terms, an AI shopping agent in your browser can now go past add to cart and place the order on an eligible Shopify checkout, including Shop Pay. It still has to show you the order and get your yes before it submits.

The picture is Shopify’s developer changelog for this post. The headline reads “WebMCP support for checkout,” and the list under it names get_checkout, update_checkout, and complete_checkout. It is the changelog page.