[UPDATE] Amazon, Delta and Schwab Join the Shut-Out of AI Agents

Last week the news was that US banks had locked AI agents out of moving customer money. The wall has since widened well beyond finance. Amazon, Yelp, Delta and others have all moved to restrict third-party agents on their sites, and the shape of the open "agentic web" that the labs have been promising is starting to look a lot more fenced.

The clearest case is Amazon, which has blocked Meta's Muse agent since 20 September after Meta declined a request to pull it. Amazon told reporters the agent did not identify itself as AI while browsing the site. Reports say agents from xAI's Grok and OpenAI also fail on Amazon, though the company has not confirmed a Grok-specific block. The roundup was reported by The Verge on 17 October and summarized widely since.

Who is closing which door

The restrictions are not uniform, which is part of the story. Yelp will now admit only agents enrolled in its paid data-licensing program. Charles Schwab is blocking agents from signing in to customer accounts, and its chief executive Rick Wurster put the worry plainly: "We don't want someone just giving their password to Muse, and letting Muse come in and take action on that client's behalf." JPMorgan Chase blocks outside agents from retail accounts but still allows read-only balance checks through providers such as Plaid. Delta's position is the murkiest, with some reports saying it is stopping outside agents from booking tickets and others quoting the airline as saying it has no third-party booking integration to begin with.

The agentic web meets the terms of service

Pull back and a pattern emerges. The labs have spent a year selling agents that can shop, book and bank on your behalf, and the sites those agents would act on are deciding, one at a time, that they would rather not be automated against without a say. Some of the objection is security, some is licensing, and some is simply that a bot hammering a checkout flow looks nothing like a customer.

It is the same tension that pushed Replit to rethink its default model setup: agents are only as useful as the places that let them in. A capability that works in a demo is not the same as one the rest of the internet has agreed to accept. Right now the internet is still making up its mind, and the early answer, from some of its biggest front doors, is no.