Walmart gave your AI a spending limit. The checkout is writing the agent rules now.
23 Oct 2026 · News
The biggest store in America just told AI shopping agents what they can and can't do. Amazon is showing them the door. The AI labs are mostly handing the money part to someone else.
The rules that actually bound your personal agent are being written at the checkout, not inside the agent. Walmart now treats an AI agent like a second cardholder on your account: its own profile, a limit you set, no card number, and a returns promise when it gets things wrong. The card networks already built the spending caps. The labs route their agents' purchases through someone else's wallet. The agent's own "are you sure?" is turning into the backup.
On Wednesday Walmart announced Agent Profiles, due "in the next month." Today an agent shopping at Walmart signs in as you, so its orders blur into yours. With a profile, each agent gets its own slot inside your account, its purchases show up separately, and you choose whether it asks before every order or can spend up to a limit you set ("for example, $50, $100 or $200"). You can delete the profile any time. Walmart's own comparison: "Think about it like adding someone as a cardholder on your credit card." Agents connect through a new Walmart Agent Gateway, built on MCP (the common plug that lets agents use outside tools), and the gateway can find your usual milk without handing the agent your whole order history.
The rules are the interesting part. Walmart's terms say agents "must not take actions beyond what the shopper intends," never receive your card information, and can't add or change payment methods. Purchases need your approval by default, and Walmart "may require additional approvals even for purchases within an agent's spending limits." Walmart's returns process applies, "including if an agent doesn't act as intended." And agents that break the terms "will be blocked from Walmart's site." No Walmart+ membership is needed, TechCrunch reported, and Reuters named ChatGPT, Gemini and Meta's Muse as agents that can plug in.
Amazon went the other way. On 20 September it started blocking Muse, showing shoppers a popup that "continued access by an unauthorized AI agent violates Amazon's Conditions of Use," GeekWire reported. It is also suing Perplexity over its Comet browser. Amazon's Conditions of Use do have an "Agent Terms" section, but it's a hall pass, not a wallet: an agent must name itself in every request ("Agent/[agent name]"), must not fake being human, and must stop if Amazon asks. Nothing about limits, nothing about returns. Two stores, two rulebooks, and both of them written by the store.
The spending cap itself isn't new. Visa launched its agent program in April 2025 with the line "Each consumer sets the limits, and Visa helps manage the rest," and its developer docs describe agent-specific card tokens with controls checked when the payment hits the network. Mastercard says Agent Pay gives agents "verified credentials, tokenized payment information, spending controls and proof of user consent." So the cap lives in the card rail. What Walmart adds is the store's half: who the agent is in your account, how it must behave, and who eats a wrong order.
The labs are leaning on those rails too. Anthropic's new Claude Duet asks before it pays for anything, and some things are "off-limits even with your approval, like trading securities or moving money between accounts." When it does buy, it goes through Stripe's Link wallet, which asks you to approve the spend and pays with a virtual card, or through Shopify's Shop Pay. The lab draws the outer fence. The money itself runs on someone else's rules.
The stakes got real fast. Muse passed 10 million users, and more than a quarter of them buy through it, with an average purchase over $200, Mark Zuckerberg said on Meta's earnings call this week, per Business Insider. Meta plans to make money from Muse mostly through fees on the purchases it helps with. That's a reason for a store to write rules instead of ignoring the traffic, and a reason to notice that an agent paid by the sale has its own interest in you buying something.
Eight days ago we wrote that you still pay for your agent. JPMorgan had locked agents out, Shopify had let them in, and Shop's help page said you're responsible for an agent's purchase "even if the agent misunderstands your instructions." Six days later the country's biggest retailer is putting a limit on the agent and saying its returns desk covers the agent's mistakes. That's a real shift in who absorbs the error, at least at one store. It's also the commerce version of the rule we liked on 10 October, that the safety limit belongs outside the model. A $100 cap enforced by Walmart doesn't care how persuasive your agent is.
Our call: by 30 June 2027, Amazon trades its flat block for a gated lane for outside agents, with registered agents and customer-set limits, because a quarter of 10 million Muse users shopping somewhere else is too much traffic to wave off. And at least one more top-ten US online retailer publishes agent terms that cover agent mistakes in returns. The call rests on Walmart shipping profiles on time next month; if they slip, so does the copying. But the direction is set. The lab builds the shopper, the card network caps the wallet, and the store writes the house rules. Your agent's real rulebook is the one the checkout hands it.