What shipped
Shopify has extended WebMCP support to checkout. Browser-based agents can now read and update a Shopify checkout in the buyer’s own browser session, using four tools: navigate_to_storefront, get_checkout, update_checkout and complete_checkout.
The descriptions are terse and worth reading literally. get_checkout reads checkout state, messages and post-completion order details. update_checkout changes supported checkout fields. complete_checkout submits the checkout after buyer confirmation.
The part that matters to merchants
These tools run inside checkout-web and share state with the checkout interface. They do not expose a new API, and they require no merchant configuration.
That last clause is the story. A Shopify merchant does not switch this on, and there is no described mechanism to switch it off. If your store is eligible, browser agents can now drive your checkout. Whether that is a feature or an imposition depends on a merchant’s view of agentic shopping, and Shopify has made the decision on their behalf.
It also puts Shopify at the opposite end of the market from Amazon and Adidas, which TechCrunch notes have moved to restrict agents from buying on their platforms. The same capability is being treated as a growth channel by one company and as abuse by another.
Where the human stays
Shopify’s boundary is confirmation, not autonomy. complete_checkout submits only after the buyer confirms. If checkout opens a review step, the buyer reviews the order on the page, and the agent may call complete_checkout again only once the buyer authorises submission.
Where the buyer’s input is required — 3D Secure authentication, or a blocking UI extension — the tools hand control back. So the agent fills the form and presses the button; the human still has to say yes, and the bank still gets to ask.
That is a defensible line, and it is also the line most likely to move. Every friction point in this design is a place an agent vendor will want removed, and the pressure to remove them will come from the same place the demand came from.
What to watch
TechCrunch reports the rollout reaches all eligible Shopify merchants, and that Shopify announced partnerships with Meta’s Muse agent and with Instinct alongside it. Two things follow. First, whether merchants get an opt-out, which is the obvious gap in the changelog as written. Second, whether the confirmation step holds: if a partner agent ships a flow where confirming is one tap inside the agent’s own interface rather than on the checkout page, the protections described here become considerably thinner than they read.
