AI agents are starting to shop. Is your store ready?
Based on scanning 1,000+ e-commerce brands
This is not a future prediction. It is happening right now. AI shopping agents are live, processing millions of product queries every week, and making purchase decisions for real consumers.
shopping queries processed by ChatGPT alone. That's 84 million times per week a consumer asks an AI agent to find, compare, or buy a product — instead of going to your site directly.
Understanding the difference between these two types is the key to understanding agentic commerce.
These agents read your product data through APIs, feeds, and structured markup. They never open a browser. They need machine-readable data to discover and recommend your products.
These agents open a real browser, see the screen with AI vision, click buttons, and fill forms. They interact with your site like a human would — except they're software.
This isn't future speculation — these agents are live today.
Every one of these 10 agents is publicly available and actively processing shopping queries right now. The question is whether your store is ready for them.
There are five layers between an AI shopping agent and your products. Each one can block, confuse, or welcome the agent. Most brands don't know these layers exist.
A public text file on every website that tells bots what they're allowed to access. Think of it as a sign on your shop door: "Humans welcome. GPTBot — stay out." Every website can have one at yoursite.com/robots.txt. Most CMOs don't know it exists.
Go to yoursite.com/robots.txt right now. You might be surprised by what you find.
Even if your robots.txt says "welcome," your CDN — the network that delivers your site globally, companies like Akamai, Cloudflare — might block AI agents automatically. Your security team turned on "bot protection" and didn't realize it blocks AI shopping agents too.
This is the most common accidental blocker we see across 1,000+ brands.
Invisible code on your product pages that tells AI agents: this is a product, it costs $89, it's in stock, here are the sizes. Without it, AI agents can see your page but can't understand what they're looking at. Uses a standard called Schema.org.
Only 25% of brands we scanned have complete structured product data.
XML or JSON files listing your entire product catalog. Google Merchant Center feeds, Shopify's products.json, RSS feeds. Feed-based AI agents need these to discover and recommend your products.
Feed-based agents like ChatGPT Shopping and Google AI Mode rely entirely on these.
Computer use agents see your site the same way a human does — through screenshots. If your "Add to Cart" button is hard to find for a human, it's hard to find for an AI agent too.
Browser agents like Operator and Comet literally take screenshots and click on what they see.
We sent AI agents to every major e-commerce brand we could find. Here's what we learned.
95% of e-commerce brands don't explicitly block AI agents in their robots.txt.
But many are accidentally invisible due to missing structured data, broken feeds, or server-level blocking. The door is open, but the lights are off.
After scanning 1,000+ brands, clear patterns emerge. Most brands fall into one of three categories.
Welcomes all AI agents. Has structured data, product feeds, clean checkout. AI agents can find, understand, and attempt to buy Glossier products.
Explicitly blocks 40+ AI bot user agents in robots.txt. A strategic business decision to protect their product data. Amazon blocks every AI shopping agent from reading their catalog — while sending their own Amazonbot to read everyone else's.
Robots.txt doesn't block AI agents, but the Akamai CDN returns 403 Forbidden to every AI user agent. Nike's security team is inadvertently preventing AI-driven discovery of Nike products. They may not even know.
ChatGPT Shopping, Google AI Mode, and other feed agents are most affected by data gaps— missing structured data, broken product feeds, and incomplete catalog information.
Operator, Comet, and other browser agents are most affected by checkout friction— login walls, ambiguous buttons, complex forms, and poor visual hierarchy.
Practical, prioritized recommendations. Start with the quick wins — most take less than a day and have an outsized impact on agent access and product understanding.
Go to yoursite.com/robots.txt right now. See who you're blocking. Remove blocks on GPTBot, PerplexityBot, ClaudeBot unless you have a strategic reason to block them.
Add structured data to every product page. At minimum: name, price, availability, image, description. Most e-commerce platforms have plugins for this.
Browser agents cannot create accounts. If checkout requires login, every browser-based AI agent will fail at the last step. Enable guest checkout.
Whitelist GPTBot, PerplexityBot, ClaudeBot, and other AI agent user agents in your Cloudflare, Akamai, or Fastly configuration. Your security team may have blocked them without realizing the commerce impact.
If you don't have product feeds, create them. Feed-based agents like ChatGPT Shopping rely on these to discover and recommend your products. Shopify stores: your products.json feed already exists.
A new standard that helps AI agents understand your site structure, policies, and capabilities. Think of it as a README for AI agents. Place it at yoursite.com/llms.txt.
As the ACP standard matures, adding dedicated API endpoints for AI agent interactions will give you an advantage. This is the emerging standard for agent-to-store communication.
Clear CTAs, simple forms, no ambiguous steps. Every unnecessary click is a point where an AI agent might get confused. Design for clarity, not cleverness.
As AI agents and platforms evolve, your site's posture will shift. Track robots.txt rules, structured data coverage, and WAF behavior continuously to catch regressions before they cost you sales you can't see in analytics.
Agentic commerce is early, but the trajectory is clear. Here's what the next 12–24 months look like.
Computer use agents browse your site exactly like a human — through screenshots and clicks. You can't block them with robots.txt because they don't read it. They open Chrome. The era of controlling AI access through text files is ending.
It's no longer "can agents access your site?" It's "will they succeed when they try?" The brands that win will be the ones where AI agents can actually complete a purchase, not just read a product page.
Alongside human conversion rate, e-commerce teams will track agent conversion rate — what percentage of AI agent visits result in a successful purchase? This metric doesn't exist in your analytics today.
Brands that optimize now will capture AI-driven traffic while competitors are still figuring out what agentic commerce means. When a consumer asks ChatGPT "buy me running shoes," the agent will recommend brands it can actually buy from.
The shift isn't coming. It's here.
84 million shopping queries per week on ChatGPT alone. 10 live AI shopping agents. 1,000+ brands tracked. The data is clear: brands that are ready for AI agents will capture a growing share of commerce. The ones that aren't won't even know what they're missing.
The most important agent-access changes, new machine-readable signals, and infrastructure shifts from the ARC index. No credit card required.