Agents can check out on Shopify now. Who checks what they read first?

On Sep 28, 2026, Shopify’s developer changelog announced that browser agents can now “read and update Shopify checkouts” through WebMCP tools, covering the journey “from product discovery and cart management through checkout and order confirmation” (Shopify changelog). Merchants don’t have to do anything. The tools, in Shopify’s words, “don’t expose a new API or require merchant configuration.”

These notes cover what the change is, where the safeguards sit, and one gap in them that matters for anyone who writes product copy. We also mark what is not confirmed, because a lot of early coverage blurred that line.

What changed

WebMCP is a browser protocol. A page registers tools, and an agent running in the shopper’s browser calls them instead of clicking through a layout built for people. Shopify’s Checkout WebMCP docs list four tools: get_checkout reads the state of a checkout, update_checkout changes contact details, fulfillment, discounts and payment, complete_checkout places the order, and navigate_to_storefront sends the tab back to the store.

That is the last step of a path that was already open. Shopify’s storefront tools cover search, browsing, product detail, cart and policy lookups, and they’re available on “every Liquid storefront, and on storefronts built with the Hydrogen developer preview.” Put together, an agent in a browser can go from a search to a placed order without a human clicking anything but a yes.

The limits Shopify documents

The docs are specific about what an agent can’t do. It can’t change which items are in the order: “The buyer changes items on the page.” It can’t enter new card details, only use a saved Shop Pay card or an approval. Agents are also told to treat text in tool responses as data, not instructions, because it “can contain prompt-injection attempts.”

Then there is consent. The docs say: “Before you call complete_checkout, show the buyer the current order and total, and get their permission to place it.” That applies whether or not the agent has signed its requests with Web Bot Auth or has a Shop Pay approval.

Read that carefully. The consent step is about the order and the total. It is a good rule for preventing a surprise charge. It says nothing about the description that led the shopper to the cart.

The gap: consent covers the total, not the claims

Picture the path. A shopper asks an agent for a fragrance-free baby wash. The agent finds one, adds it to the cart, shows “1 item, 14 dollars, place this order?” and the shopper says yes. Every safeguard worked. If the summary that put that product in front of them said “fragrance-free” and the ingredient list says otherwise, none of the safeguards were about that.

Nobody is being negligent here. Checkout is a mechanical step, and a mechanical step can be checked mechanically. Whether a product is what its summary says is a question about text, and it gets answered earlier, at the point where the agent reads about the product.

We know that reading step goes wrong. When we read what Shopify’s catalog tells AI agents about 192 products and checked 3,546 claims against each brand’s own copy, 89% of the products had at least one claim the brand never made, and 14% had a claim that directly contradicts the brand on health, safety or what’s in it (the study, how we checked). That is one day and the top results only. It still means a smoother checkout sits downstream of a step with a measured error rate.

Some of that text is written by Shopify, not by you. Shopify marks fields like the catalog’s description and top features as inferred, so a claim can reach an agent that appears nowhere in your listing (what Shopify’s AI adds).

What isn’t confirmed

• Which agents use these tools. Shopify describes the tools as open to browser-based agents. We haven’t found a primary source showing which agents call them, and no usage figures have been published.
• What those agents read. The storefront tools return prices, availability and product details from the storefront. The catalog is a separate path. It isn’t established that an agent using checkout tools read its product description from the catalog, the storefront, or somewhere else.
• Whether merchants can restrict it. The docs describe no setting to turn the tools off. That is an absence in the docs, not a confirmed fact about the product.
• How stable it is. WebMCP is experimental. Chrome describes it as an origin trial that is “early access to experimental platform features.”

Announced partnerships with AI companies are also not the same thing as adoption of these particular tools, so we’re not naming any.

What to do with this

For most stores, nothing changes on Monday. The practical point is that the text an agent reads about your products now matters at a point closer to a sale, so it’s worth reading that text yourself. AI getting your product wrong? is the place to start if you’ve found a claim you didn’t make, and how AI shopping agents choose products covers what decides which product an agent picks at all.

We’ll keep adding to these notes as the open questions get answered. Earlier ones are under notes.

Common questions

Do I need to enable WebMCP checkout?

No. Shopify’s changelog says merchant action is not required, and the docs list no merchant configuration. Eligibility depends on the checkout, and the docs point to a separate page for which checkouts are included, so check that page for your setup.

Does the agent’s consent step protect shoppers from wrong product claims?

Not by design. The documented consent step asks the agent to show the current order and total and get permission. It doesn’t ask anyone to verify the product’s claims. Also, the docs put that obligation on the agent. We haven’t seen anything confirming the tool enforces it.

Can Hearsay change what agents read?

No. Nobody outside Shopify can edit its summary. Hearsay reads what Shopify’s catalog tells AI agents about your products, compares each claim with your own copy, and emails you when a claim changes. We can’t see which agents use checkout tools or what they read. The free scan checks 5 of your products.