Shopify lets AI agents place orders at checkout. Only Shop Pay stores get it

Shopify turned on WebMCP tools inside checkout on 28 September 2026. A browser agent can now read the page, fill it in and send the order once the shopper confirms it. Until then the same agents could only search products and manage a basket, then hand the person over at the payment step.

Four tools let an agent read and submit a Shop Pay checkout

WebMCP is a way for a web page to hand an AI agent a short list of actions instead of making it click around the screen. Shopify added four. One reads the checkout and the finished order. One updates contact details, delivery, discount codes and the payment method. One sends the order. One takes the shopper back to the shop. The release note says shops need no setup, because the tools run inside the checkout code and read the same data as the page.

This follows a run of similar moves. Shopify put Shop Pay inside Meta’s Muse assistant and wrote joint rules for AI shopping with Google. Retailers are doing the same work on their side, as JD Sports did when it rebuilt its product search for agents.

Shopify’s own test finished 60 of 60 orders in 10.3 seconds

Shopify compared the tools with plain browser automation, where an agent moves a cursor and types. The tool version finished all 60 test orders. The automation version finished 56. Shopify says the tool route cost 58 per cent less and took 10.3 seconds against 27.4 seconds. Those numbers come from the company, not from an outside test.

Agents cannot add items or type a new card number

The limits are tight. An agent cannot change what is in the basket. It cannot enter fresh card details either. It can only use a card already saved in Shop Pay or an approval the shopper gave before. Anything that needs the person, such as a bank check or an app that blocks the screen, hands control back.

Coverage is narrow too. The tools work on Shop Pay checkouts in Shopify’s standard three-page flow and only in Chromium browsers. They do not work on B2B, embedded, mobile app or draft orders.

Order reports will mix agent orders with human ones

Nothing in the order record says an agent typed it. The shopper is real, the card is real and the confirmation is theirs. So the order lands in the same reports as every other one, while the session that produced it looks nothing like a human visit.

Open your bot rules and your order tracking this week. A filter that throws away automated sessions will now throw away paying customers. Then check which of your shops run the standard three-page Shop Pay checkout, because those are the ones where this already works.