Companies blocking AI agents
Banks, retailers, airlines, and platforms that keep personal AI agents out, or let them in, with the date and the source for each.
Updated · ledger as of Nov 11, 2026
Personal AI agents such as Meta Platforms' Muse can log in to a user's accounts, shop, book trips, and move money. Since Muse launched on Sept. 8, 2026, banks, retailers, and airlines have had to decide whether to let those agents in. This page lists each company that has said what it does, with the date and the source.
Companies that block or restrict AI agents
Newest first. Restrictions vary: some companies shut agents out entirely, while others let agents read information but not move money or complete a purchase.
| Company | What it did | Stance | Date | Source |
|---|---|---|---|---|
| United Airlines (UAL)Airlines and travel | Restricting unauthorized third-party personal AI agents on its website and app and through the travel agencies and aggregators that sell its tickets, with updates to its booking, ticketing, and distribution policies.Still allowed: Agents can still show United's flights and fares but can't complete a purchase on its site, Quartz reported, citing The Wall Street Journal. | RestrictsCompany said so | Nov 11, 2026 | United statement Quartz |
| Royal Bank of Canada (RY)Banks and finance | Decided to block third-party personal AI agents from direct access to its online banking and other sign-in services. | BlocksCompany said so | Oct 28, 2026 | Canadian Press |
| TD Bank (TD)Banks and finance | Decided to block third-party personal AI agents. | BlocksCompany said so | About Oct 28, 2026 | Canadian Press |
| BMO (BMO)Banks and finance | Doesn't permit AI agents to access its digital properties or execute transactions, a spokesperson said. | BlocksCompany said so | About Oct 28, 2026 | Canadian Press |
| CIBC (CM)Banks and finance | Doesn't support personal AI agents directly opening or accessing accounts. | RestrictsCompany said so | About Oct 28, 2026 | Canadian Press |
| Scotiabank (BNS)Banks and finance | Will limit third-party AI agents on its banking platforms while it monitors the security concerns. | RestrictsCompany said so | About Oct 28, 2026 | Canadian Press |
| Bank of America (BAC)Banks and finance | Emailed customers asking them not to share their login with AI assistants and saying they're responsible for activity that results from that access. | RestrictsCompany said so | About Oct 27, 2026 | TechCrunch |
| Kohl's (KSS)Retail and e-commerce | Doesn't let AI agents complete purchases. | RestrictsReported by The Wall Street Journal | About Oct 27, 2026 | Gizmodo CNBC |
| Tapestry (TPR)Retail and e-commerce | Doesn't let AI agents complete purchases on its brands' sites, which include Coach and Kate Spade. | RestrictsReported by The Wall Street Journal | About Oct 27, 2026 | Gizmodo |
| Neiman MarcusRetail and e-commerce | Blocks some AI shopping agents. | BlocksReported by The Wall Street Journal | About Oct 27, 2026 | Gizmodo CNBC |
| Chewy (CHWY)Retail and e-commerce | Blocks some AI agents. | BlocksReported by The Wall Street Journal | About Oct 27, 2026 | Gizmodo |
| The RealReal (REAL)Retail and e-commerce | Strengthened its bot defenses against AI shopping agents after a Verge test showed Muse could hold items in carts for hours.Agents named: Muse | RestrictsCompany said so | About Oct 26, 2026 | The Verge Gizmodo |
| Wells Fargo (WFC)Banks and finance | Has taken steps to block unauthorized agents, a spokesperson said.Since then: A new online access agreement, effective Nov. 24, 2026, makes customers responsible for revoking an AI agent's access and for all of the agent's activities until they notify the bank, American Banker reported. | BlocksCompany said so | Oct 23, 2026 | USA Today American Banker |
| Morgan Stanley (MS)Banks and finance | Has blocked third-party AI agents from accessing its platforms. | BlocksReported by Axios | Oct 22, 2026 | Decrypt eSecurity Planet |
| Citigroup (C)Banks and finance | Doesn't permit third-party AI agents or assistants to log in to a customer's account or make transactions on its digital platforms.Still allowed: Limited, read-only access through open banking providers Citi has approved. | RestrictsCompany said so | Oct 19, 2026 | USA Today Retail Banker International |
| Charles Schwab (SCHW)Banks and finance | Blocks unauthorized agents that try to log in on behalf of clients and doesn't let them move money, CEO Rick Wurster said.Still allowed: Schwab lets AI models connect under its own controls but won't let them move money, and it has limited its Claude for Financial Advisors integration to read-only access. | BlocksCompany said so | Oct 15, 2026 | InvestmentNews Banking Exchange |
| JPMorgan Chase (JPM)Banks and finance | Doesn't let third parties log in to customer accounts with customers' banking credentials, so outside agents can't send money or pay bills.Agents named: Muse and Instinct, named by CNBCStill allowed: Agents can read data such as balances through Plaid or another open banking provider. | RestrictsCompany said so | Oct 13, 2026 | Our report CNBC Fortune |
| Yelp (YELP)Tech platforms | Doesn't permit non-human traffic on its platform unless the agent has paid to access its content and data. | BlocksCompany said so | Oct 6, 2026 | TechCrunch |
| Amazon (AMZN)Retail and e-commerce | Blocked Meta's Muse from buying products on Amazon.com, saying access by an unauthorized AI agent violates its conditions of use, and asked Meta to remove Amazon from Muse.Agents named: Muse | BlocksCompany said so | Sep 20, 2026 | Our report CNBC Implicator |
| eBay (EBAY)Retail and e-commerce | Updated its user agreement to bar buy-for-me agents, LLM-driven bots, and any flow that tries to place orders without human review, unless eBay gives prior permission. The rule took effect for existing users on Feb. 20, 2026. | BlocksCompany said so | Jan 20, 2026 | eBay user agreement Value Added Resource |
| Amazon (AMZN)Retail and e-commerce | Sued Perplexity over its Comet browser's shopping agent, saying Comet accessed Amazon without authorization.Agents named: Perplexity CometSince then: A judge barred Comet from Amazon on March 9, 2026. The Ninth Circuit threw out that order on Aug. 4, 2026, Amazon filed an amended complaint on Sept. 21, 2026, and Perplexity has moved to dismiss it. The case is still open. | SuedCompany said so | About Nov 4, 2025 | Ninth Circuit opinion The Fashion Law |
| Booking Holdings (BKNG)Airlines and travel | Booking.com's terms, in the version dated Aug. 25, 2025, bar automated assistants, including AI-powered ones, from using its platform for any purpose, including making bookings, without its prior written permission.Still allowed: Booking works with OpenAI on a ChatGPT app, Reuters reported. | BlocksCompany said so | About Aug 25, 2025 | Booking.com terms |
Companies that let AI agents in
Companies that let agents book, buy, or trade, often only agents that identify themselves or go through an approved connection.
| Company | What it did | Stance | Date | Source |
|---|---|---|---|---|
| Delta Air Lines (DAL)Airlines and travel | Said authenticated AI assistants can complete bookings, with extra safeguards for sensitive trips such as those for unaccompanied minors.Since then: On Oct. 6, 2026, Delta told TechCrunch it had no partnership or integration that enables a third-party AI agent. | AllowsReported by Quartz, citing The Wall Street Journal | Nov 11, 2026 | Quartz TechCrunch |
| Uber (UBER)Airlines and travel | CEO Dara Khosrowshahi called AI agents another opportunity to reach Uber's platform and a net positive for demand, though agents placed only four rides and 500 Uber Eats orders during the week of Halloween, its busiest week in October. | AllowsCompany said so | Nov 4, 2026 | TechCrunch |
| Walmart (WMT)Retail and e-commerce | Is building an Agent Gateway and set terms for AI agents so customers can shop Walmart and Sam's Club through the agents they choose. Agents that don't follow the terms are blocked. Walmart already sells through Muse, ChatGPT, Gemini, and others. | PartnersCompany said so | Oct 21, 2026 | Walmart TechCrunch |
| American Express (AXP)Banks and finance | Introduced a framework that captures and authenticates a cardholder's purchase intent before an AI agent completes a purchase. | AllowsCompany said so | Oct 13, 2026 | TechCrunch |
| Southwest Airlines (LUV)Airlines and travel | Launched a ChatGPT plug-in, powered by OpenAI and Amazon Web Services, for shopping its flights, which it called the first step in a phased AI-powered booking approach. | PartnersCompany said so | Oct 6, 2026 | Southwest release |
| Zillow (Z)Tech platforms | Allows AI agents acting on behalf of consumers, though its anti-bot measures sometimes catch them. | AllowsCompany said so | Oct 6, 2026 | TechCrunch |
| Hilton (HLT)Airlines and travel | Accepts bookings from various agents, including Muse, a spokesperson said.Agents named: Muse | AllowsCompany said so | Oct 2, 2026 | Skift |
| Expedia Group (EXPE)Airlines and travel | Named by Meta as a coming Muse connector to help users plan travel.Since then: Expedia also works with OpenAI, Reuters reported on Nov. 11, 2026. | PartnersCompany said so | Sep 23, 2026 | Meta |
| Best Buy (BBY)Retail and e-commerce | Named by Meta as a Muse shopping partner at Meta Connect.Agents named: Muse | PartnersCompany said so | Sep 23, 2026 | Meta TechCrunch |
| Gap (GAP)Retail and e-commerce | Named by Meta as a Muse shopping partner at Meta Connect.Agents named: Muse | PartnersCompany said so | Sep 23, 2026 | Meta TechCrunch |
| SephoraRetail and e-commerce | Named by Meta as a Muse shopping partner at Meta Connect.Agents named: Muse | PartnersCompany said so | Sep 23, 2026 | Meta TechCrunch |
| Wayfair (W)Retail and e-commerce | Named by Meta as a Muse shopping partner at Meta Connect.Agents named: Muse | PartnersCompany said so | Sep 23, 2026 | Meta TechCrunch |
| Instacart (CART)Retail and e-commerce | Listed as a coming Muse integration at Meta Connect.Agents named: Muse | PartnersReported by TechCrunch | Sep 23, 2026 | TechCrunch |
| Shopify (SHOP)Retail and e-commerce | Partnered with Meta to bring Shop Pay checkout to Muse. In July 2025, Shopify storefronts' robots.txt files said buy-for-me agents and any flow that completes payment without a final review step aren't permitted.Agents named: Muse | PartnersCompany said so | Sep 21, 2026 | PYMNTS Modern Retail |
| Robinhood (HOOD)Banks and finance | Lets customers connect third-party AI agents to separate Agentic Trading accounts, where the agents can view account data and execute trades. | AllowsCompany said so | May 27, 2026 | Robinhood Decrypt |
| Visa (V)Banks and finance | Announced Visa Intelligent Commerce so AI agents can find and buy for consumers within limits each consumer sets, with partners including Anthropic, Microsoft, OpenAI, and Perplexity. | PartnersCompany said so | Apr 30, 2025 | TechCrunch |
| Mastercard (MA)Banks and finance | Announced Agent Pay so AI agents can shop and pay online for consumers, with partners including Microsoft and IBM. | PartnersCompany said so | Apr 29, 2025 | TechCrunch |
By industry
| Industry | Limiting agents | Letting agents in |
|---|---|---|
| Banks and finance | 11 | 4 |
| Retail and e-commerce | 7 | 7 |
| Airlines and travel | 2 | 5 |
| Tech platforms | 1 | 1 |
How this ledger is kept
A personal AI agent is an assistant that acts for one user: it logs in to that user's accounts, fills out forms, books trips, buys things, or moves money. Meta Platforms' Muse, OpenAI's agents, and Perplexity's Comet browser are examples. This page tracks what companies do about those agents. It doesn't cover search crawlers that collect pages to train AI models.
Each row links to the record we read: the company's statement, its terms of service, a court filing, or a report that quotes a named spokesperson. "Company said so" means the company itself confirmed it. "Reported" means an outlet said so and the company didn't confirm it on the record. The date is when the company acted or first said so publicly, or when the action was first reported if the company gave no date. "About" marks a date we couldn't pin down to the day.
"Blocks" means agents are shut out of the service the row describes. "Restricts" means some actions are off limits, such as moving money or completing a purchase, while others, such as reading a balance or searching fares, still work. "Allows" and "Partners" mean the company lets agents act, sometimes only agents it approves.
Common questions
- Which companies block AI agents?
- As of November 11, 2026, companies that block or restrict personal AI agents include United Airlines, JPMorgan Chase, Citigroup, Charles Schwab, Morgan Stanley, Wells Fargo, Bank of America, Royal Bank of Canada, TD Bank, BMO, CIBC, Scotiabank, Amazon, eBay, Kohl's, Tapestry, Neiman Marcus, Chewy, The RealReal, Booking.com, and Yelp. Some shut agents out entirely, and others block only actions such as moving money or completing a purchase.
- Why are banks blocking AI agents?
- Banks say agents that log in with a customer's password put accounts at risk. JPMorgan Chase said it doesn't let third parties log in with customers' banking credentials, and CEO Jamie Dimon warned on October 13, 2026 about rogue agents. Several banks still let agents read balances through approved open banking connections.
- Did Amazon block Meta's Muse?
- Yes. Amazon blocked Muse from buying products on Amazon.com starting around September 20, 2026, saying continued access by an unauthorized AI agent violates its Conditions of Use, and asked Meta to remove Amazon from Muse. Amazon is also suing Perplexity over its Comet browser's shopping agent.
- Which companies allow AI agents?
- Walmart, Shopify, Robinhood, Delta Air Lines, Hilton, and Zillow have said they let AI agents act for customers, often only agents that identify themselves or follow their rules. Southwest Airlines and Expedia have built tools with OpenAI or Meta, Uber calls agents a net positive for demand, and Visa, Mastercard, and American Express have programs for agent purchases.
- How often is this page updated?
- A company gets a row when it says, in a statement, its terms, a court filing, or through a named spokesperson, that it blocks, restricts, sues over, or allows personal AI agents, or when a major outlet reports that it did. Rows are added as new companies act.
Use this data
Our figures are free to reuse in articles, newsletters, and research with attribution and a link back to this page. Current table as a file: download CSV.
Suggested citation: AIStockWire, “Companies blocking AI agents,” aistockwire.com/companies-blocking-ai-agents, data as of Nov 11, 2026. Questions about the data: support@aistockwire.com.
Related: AI IPO tracker, AI compute commitments, Data center moratorium tracker. Not investment advice.